Devices, systems and methods for the collection of meter data in a common, globally accessible, group of servers, to provide simpler configuration, collection, viewing, and analysis of the meter data

ABSTRACT

The present disclosure is directed to a machine learning system for use with a power distribution system. The machine learning system includes a data library, a machine learning module, and an action module. The data library stores a plurality of data samples, where at least a portion of the data samples are associated with one or more intelligent electronic devices (IEDs). The machine learning module processes data samples from the data library using at least one machine learning algorithm and outputs at least one recommendation and/or prediction based on the data samples received. The action module receives the at least one recommendation and/or prediction and performs at least one action based on the recommendation and/or prediction. The at least one action includes outputting at least one communication signal and/or at least one control signal to at least one client or at least one of the one or more IEDs.

PRIORITY

This application claims priority to U.S. Provisional Patent ApplicationSerial No. 62/631,660, filed Feb. 17, 2018, and 62/752,740, filed Oct.30, 2018, the contents of which are hereby incorporated by reference intheir entireties.

BACKGROUND Field

The present disclosure relates generally to intelligent electronicdevices (IEDs) and utility metering systems, and more particularly, todevices, systems and methods for the collection of meter data in acommon, globally accessible, group of servers, to provide simplerconfiguration, collection, viewing, and analysis of the meter data.

Description of the Related Art

Meter Data—the collection, storage, and viewing of it—is quicklybecoming a major issue in the Power Industry, as more and more devicesare commissioned. Meters have hundreds of channels, with years of data,and customers have thousands of meters, resulting in trillions of datapoints. Additionally, as the data for multiple meters at a location areoften interconnected, it is important to be able access that data inparallel, preventing it from being stored separately.

Not only do users expect to be able to access each of these data pointsfrom anywhere, with increasing emphasis on security in corporatenetworks, many users are losing the ability to install client softwareto perform specialized meter data viewing. Additionally, many networksrestrict the network traffic that is allowed in and out, making itdifficult for data collection software to query meter data from meters.

Another problem encountered in networks, especially when traversingpublic networks such as the Internet, is that data can be interceptedand changed by malicious hosts. While it may be desirous for benignhosts, such as firewalls, to access this data, malicious hosts should beprevented. Additionally, malicious hosts can emulate data servers andmeters, causing traffic to go to unintended destinations, or changingthe data before it gets to the server.

SUMMARY

According to one aspect of the present disclosure, management of meterdata is implemented by storing that data in a central data server,accessible from anywhere in the world. Such a server, also referred toas Meter Data Cloud, may store the data from all configured metersworldwide, providing both a consistent location for data to be queriedfrom, but also simplifying the management of the meter data for theuser. Such a Meter Data Cloud, being accessible from the publicInternet, facilitates user access, as no client software would berequired, and the meter data may be presented through a public webpage.

In another aspect, the management of meter data is implemented bycreating tiers of data, wherein over time older data is analyzed andreplaced with lower resolution summary data. Such tiers may also changethe location the data is stored, placing the most recent data in thefastest locations, and moving the older tiers to slower backuplocations.

In one aspect of the present disclosure, the restriction of traffic maybe alleviated by enabling the meters to push their own data up to theMeter Data Cloud. Such a push would be outbound from a private network,often open through firewalls, and may use common protocols, which mayeasily be allowed by firewall management. Additionally, such traffic maybe routed through secure protocols, such as HTTPS and VPNs, amongothers, to ensure privacy.

Another implementation to alleviate the restriction of traffic is toprovide an intermediary data collector, within the private network, thatwould collect the meter's data, and provide the upload service to theMeter Data Cloud. Such an intermediary data collector, being a singlenode in the network, is easier to configure to allow outbound dataaccess.

In one aspect, the number of meters is resolved by enabling the metersto register themselves with the Meter Data Cloud.

Another solution to the number of meters is for meters to use arbitrarylocal only Internet addresses, and only interact with the outside worldthrough the Meter Data Cloud. Such a meter would require either localaccess to configure, or commands left on the server, sometimes called aCommand and Control (CNC) Server.

In one aspect of the present disclosure, a machine learning system foruse with a power distribution system is provided including a datalibrary configured to store a plurality of data samples, wherein atleast a portion of the data samples are associated with one or moreintelligent electronic devices (IEDs); a machine learning moduleconfigured to execute at least one machine learning algorithm andreceive data samples from the data library, the machine learning moduleconfigured to process the data samples in accordance with the at leastone machine learning algorithm and output at least one recommendationand/or prediction based on the data samples received; and an actionmodule configured to receive the at least one recommendation and/orprediction from the machine learning module and perform at least oneaction based on the recommendation and/or prediction, wherein the actionincludes outputting at least one of a communication signal and/or atleast one control signal to at least one client or at least one of theone or more IEDs.

In another aspect, the machine learning system further includes a serverincluding at least one memory and at least one processor, the datalibrary stored in the at least one memory and the machine learningmodule and action module executed by the at least one processor.

In one aspect, the at least one machine learning algorithm includes atleast one of an Artificial Neural Network, a Backpropagation, DeepLearning, a Convolutional Neural Network, a Recurrent Neural Network,and/or an Evolution Algorithm.

In a further aspect, the plurality of data samples include at least oneof voltage, current, and frequency values measured by the one or moreIEDs, the recommendation and/or prediction includes a prediction ofenergy usage in a predetermined future time interval, and the actionperformed by the action module includes outputting the communicationsignal to the at least one client indicating the predicted energy usage.

In yet another aspect, the plurality of data samples include at leastone of voltage, current, and frequency values measured by the one ormore IEDs, the recommendation and/or prediction includes a prediction ofenergy usage in a predetermined future time interval, and the actionperformed by the action module includes outputting the control signal tothe at least one client to shut off one or more loads if the predictedenergy usage is above a predetermined threshold.

In one aspect, the predetermined threshold is determined by the machinelearning module based on load shedding parameters including at least oneof time of day, designation of equipment as essential or non-essential,and/or real-time pricing issued by a utility.

In a further aspect, the plurality of data samples include at least oneof voltage, current, and frequency values measured by the one or moreIEDs, the recommendation and/or prediction includes a prediction ofenergy usage in a predetermined future time interval, and the actionperformed by the action module includes outputting the communicationsignal to the at least one client indicating additional energy may beconsumed by a load if the predicted energy usage is below apredetermined threshold.

In still another aspect, the plurality of data samples include a firsttrained set based on historical readings by the one or more IEDs, asecond trained set based on live readings of the one or more IEDs, andenvironmental information, the recommendation and/or prediction includesa prediction of energy usage for a predetermined future time interval,the action performed by the action module includes outputting acommunication signal to the at least one client indicating the predictedenergy usage.

In a further aspect, the plurality of data samples further includespricing information, the machine learning module predicts pricing costsfor the predetermined future time interval, and the action module sendsa communication signal to the at least one client including thepredicting pricing costs for the predetermined future time interval.

In one aspect, the machine learning module generates a recommendation asto which periods within the predetermined future time interval to lowerand increase energy usage to reduce costs and the action module sends acommunication signal to the at least one client including therecommendation.

In another aspect, the machine learning module generates arecommendation as to when ideal periods within the predetermined futuretime interval to lower and increase energy usage to reduce costs and theaction module sends a control signal to the at least one client to turnon or off loads to increase or decrease energy usage in a way thatlowers costs.

In a further aspect, the plurality of data samples include waveformsignatures of faults measured by the one or more IEDs occurring on thepower distribution system, and the recommendation/prediction includes aprediction of at least one type of fault and a number of predictedfuture occurrences of the predicted at least one type of fault.

In another aspect, the at least one type of fault includes at least oneof transients, interruption of supply voltage or load current,undervoltage, overvoltage, waveform distortion, and/or voltagefluctuations.

BRIEF DESCRIPTION OF THE DRAWINGS

These and other objects, features and advantages of the presentdisclosure will be apparent from a consideration of the followingDetailed Description considered in conjunction with the drawing Figures,in which:

FIG. 1 is a block diagram of an intelligent electronic device (IED),according to an embodiment of the present disclosure.

FIGS. 2A-2H illustrate exemplary form factors for an intelligentelectronic device (IED) in accordance with an embodiment of the presentdisclosure.

FIG. 3 illustrates an environment in which the present disclosure may beutilized.

FIG. 4 is a block diagram of a web server power quality and revenuemeter, according to an embodiment of the present disclosure.

FIG. 5 is a functional block diagram of the processor of the web serverpower quality and revenue meter system shown in FIG. 4 , according tothe embodiment of the present disclosure.

FIG. 6 illustrates another environment in which the present disclosuremay be utilized.

FIG. 7 is a flow chart illustrating a method for communicating data froman IED on an internal network to a server on an external network througha firewall.

FIG. 8 illustrates yet another environment in which the presentdisclosure may be utilized.

FIG. 9 illustrates a further environment in which the present disclosuremay be utilized.

FIG. 10 illustrates a device registration system in accordance with anembodiment of the present disclosure.

FIG. 11 illustrates a payment/credit system in accordance with anembodiment of the present disclosure.

FIG. 12A illustrates a partitioned server for distributed functionalityin accordance with an embodiment of the present disclosure.

FIG. 12B illustrates a partitioned server for storing duplicate copiesof data in accordance with an embodiment of the present disclosure.

FIG. 12C illustrates load balancing of servers based on geographiclocation in accordance with an embodiment of the present disclosure.

FIG. 12D illustrates dynamic load balancing of servers based on resourceusage in accordance with an embodiment of the present disclosure.

FIG. 13A is a block diagram of a server implementing a Server HostedCommand Protocol in accordance with an embodiment of the presentdisclosure.

FIG. 13B illustrates server hosted command protocol exchanges inaccordance with an embodiment of the present disclosure.

FIG. 14 illustrates a machine learning and analysis system in accordancewith an embodiment of the present disclosure.

FIG. 15 is a method for using the machine learning and analysis systemof FIG. 14 in accordance with an embodiment of the present disclosure.

FIG. 16 is a block diagram of an exemplary computing device inaccordance with an embodiment of the present disclosure.

DETAILED DESCRIPTION

Embodiments of the present disclosure will be described herein belowwith reference to the accompanying drawings. In the followingdescription, well-known functions or constructions are not described indetail to avoid obscuring the present disclosure in unnecessary detail.The word “exemplary” is used herein to mean “serving as an example,instance, or illustration.” Any configuration or design described hereinas “exemplary” is not necessarily to be construed as preferred oradvantageous over other configurations or designs. Herein, the phrase“coupled” is defined to mean directly connected to or indirectlyconnected with through one or more intermediate components. Suchintermediate components may include both hardware and software basedcomponents.

It is further noted that, unless indicated otherwise, all functionsdescribed herein may be performed in either hardware or software, orsome combination thereof. In one embodiment, however, the functions areperformed by at least one processor, such as a computer or an electronicdata processor, digital signal processor or embedded micro-controller,in accordance with code, such as computer program code, software, and/orintegrated circuits that are coded to perform such functions, unlessindicated otherwise.

It should be appreciated that the present disclosure can be implementedin numerous ways, including as a process, an apparatus, a system, adevice, a method, or a computer readable medium such as a computerreadable storage medium or a computer network where program instructionsare sent over optical or electronic communication links.

Embodiments of the present disclosure will be described herein belowwith reference to the accompanying drawings.

As used herein, intelligent electronic devices (“IEDs”) can be anydevice that senses electrical parameters and computes data including,but not limited to, Programmable Logic Controllers (“PLC's”), RemoteTerminal Units (“RTU's”), electric power meters, panel meters,protective relays, fault recorders, phase measurement units, serialswitches, smart input/output devices and other devices which are coupledwith power distribution networks to manage and control the distributionand consumption of electrical power. A meter is a device that recordsand measures power events, power quality, current, voltage waveforms,harmonics, transients and other power disturbances. Revenue accuratemeters (“revenue meter”) relate to revenue accuracy electrical powermetering devices with the ability to detect, monitor, report, quantifyand communicate power quality information about the power that they aremetering.

FIG. 1 is a block diagram of an intelligent electronic device (IED) 10for monitoring and determining power usage and power quality for anymetered point within a power distribution system and for providing adata transfer system for faster and more accurate processing of revenueand waveform analysis.

The IED 10 of FIG. 1 includes a plurality of sensors 12 coupled tovarious phases A, B, C and neutral N of an electrical distributionsystem 11, a plurality of analog-to-digital (ND) converters 14,including inputs coupled to the sensor 12 outputs, a power supply 16, avolatile memory 18, an non-volatile memory 20, a multimedia userinterface 20, and a processing system that includes at least one centralprocessing unit (CPU) 50 (or host processor) and/or one or more digitalsignal processors, two of which are shown, i.e., DSP1 60 and DSP2 70.The IED 10 also includes a Field Programmable Gate Array 80 whichperforms a number of functions, including, but not limited to, acting asa communications gateway for routing data between the various processors50, 60, 70, receiving data from the A/D converters 14, performingtransient detection and capture and performing memory decoding for CPU50 and the DSP processor 60. In one embodiment, the FPGA 80 isinternally comprised of two dual port memories to facilitate the variousfunctions. It is to be appreciated that the various components shown inFIG. 1 are contained within housing 90. Exemplary housings will bedescribed below in relation to FIGS. 2A-2H.

The plurality of sensors 12 sense electrical parameters, e.g., voltageand current, on incoming lines, (i.e., phase A, phase B, phase C,neutral N), from an electrical power distribution system 11, e.g., anelectrical circuit, that are coupled to at least one load 13 thatconsumes the power provided. In one embodiment, the sensors 12 willinclude current transformers and potential transformers, wherein onecurrent transformer and one voltage transformer will be coupled to eachphase of the incoming power lines. A primary winding of each transformerwill be coupled to the incoming power lines and a secondary winding ofeach transformer will output a voltage representative of the sensedvoltage and current. The output of each transformer will be coupled tothe A/D converters 14 configured to convert the analog output voltagefrom the transformer to a digital signal that can be processed by theCPU 50, DSP1 60, DSP2 70, FPGA 80 or any combination thereof.

A/D converters 14 are respectively configured to convert an analogvoltage output to a digital signal that is transmitted to a gate array,such as Field Programmable Gate Array (FPGA) 80. The digital signal isthen transmitted from the FPGA 80 to the CPU 50 and/or one or more DSPprocessors 60, 70 to be processed in a manner to be described below.

The CPU 50 and/or DSP Processors 60, 70 are configured to operativelyreceive digital signals from the A/D converters 14 (see FIG. 1 ) toperform calculations necessary to determine power usage and to controlthe overall operations of the IED 10. In some embodiments, CPU 50, DSP160 and DSP2 70 may be combined into a single processor, serving thefunctions of each component. In some embodiments, it is contemplated touse an Erasable Programmable Logic Device (EPLD) or a ComplexProgrammable Logic Device (CPLD) or any other programmable logic devicein place of the FPGA 80. In some embodiments, the digital samples, whichare output from the A/D converters 14 are sent directly to the CPU 50 orDSP processors 60, 70, effectively bypassing the FPGA 80 as acommunications gateway.

The power supply 16 provides power to each component of the IED 10. Inone embodiment, the power supply 16 is a transformer with its primarywindings coupled to the incoming power distribution lines and havingwindings to provide a nominal voltage, e.g., 5 VDC, +12 VDC and −12 VDC,at its secondary windings. In other embodiments, power may be suppliedfrom an independent power source to the power supply 16. For example,power may be supplied from a different electrical circuit or anuninterruptible power supply (UPS).

In one embodiment, the power supply 16 can be a switch mode power supplyin which the primary AC signal will be converted to a form of DC signaland then switched at high frequency, such as, for example, 100 Khz, andthen brought through a transformer to step the primary voltage down to,for example, 5 Volts AC. A rectifier and a regulating circuit would thenbe used to regulate the voltage and provide a stable DC low voltageoutput. Other embodiments, such as, but not limited to, linear powersupplies or capacitor dividing power supplies are also contemplated.

The multimedia user interface 22 is shown coupled to the CPU 50 in FIG.1 for interacting with a user and for communicating events, such asalarms and instructions to the user. The multimedia user interface 22may include a display for providing visual indications to the user. Thedisplay may be embodied as a touch screen, a liquid crystal display(LCD), a plurality of LED number segments, individual light bulbs or anycombination. The display may provide information to the user in the formof alpha-numeric lines, computer-generated graphics, videos, animations,etc. The multimedia user interface 22 further includes a speaker oraudible output means for audibly producing instructions, alarms, data,etc. The speaker is coupled to the CPU 50 via a digital-to-analogconverter (D/A) for converting digital audio files stored in a memory 18or non-volatile memory 20 to analog signals playable by the speaker. Anexemplary interface is disclosed and described in commonly owned U.S.Pat. No. 8,442,660, entitled “POWER METER HAVING AUDIBLE AND VISUALINTERFACE”, which claims priority to expired U.S. Provisional PatentAppl. No. 60/731,006, filed Oct. 28, 2005, the contents of which arehereby incorporated by reference.

The IED 10 will support various file types including but not limited toMicrosoft Windows Media Video files (.wmv), Microsoft Photo Story files(.asf), Microsoft Windows Media Audio files (.wma), MP3 audio files(.mp3), JPEG image files (.jpg, .jpeg, .jpe, .jfif), MPEG movie files(.mpeg, .mpg, .mpe, .m1v, .mp2v.mpeg2), Microsoft Recorded TV Show files(.dvr-ms), Microsoft Windows Video files (.avi) and Microsoft WindowsAudio files (.wav).

The IED 10 further comprises a volatile memory 18 and a non-volatilememory 20. In addition to storing audio and/or video files, volatilememory 18 will store the sensed and generated data for furtherprocessing and for retrieval when called upon to be displayed at the IED10 or from a remote location. The volatile memory 18 includes internalstorage memory, e.g., random access memory (RAM), and the non-volatilememory 20 includes removable memory such as magnetic storage memory;optical storage memory, e.g., the various types of CD and DVD media;solid-state storage memory, e.g., a CompactFlash card, a Memory Stick,SmartMedia card, MultiMediaCard (MMC), SD (Secure Digital) memory; orany other memory storage that exists currently or will exist in thefuture. By utilizing removable memory, an IED can be easily upgraded asneeded. Such memory will be used for storing historical trends, waveformcaptures, event logs including time-stamps and stored digital samplesfor later downloading to a client application, web-server or PCapplication.

In a further embodiment, the IED 10 will include a communication device24, also known as a network interface, for enabling communicationsbetween the IED or meter, and a remote terminal unit, programmable logiccontroller and other computing devices, microprocessors, a desktopcomputer, laptop computer, a server, other meter modules, etc. Thecommunication device 24 may be a modem, network interface card (NIC),wireless transceiver, etc. The communication device 24 will perform itsfunctionality by hardwired and/or wireless connectivity. The hardwireconnection may include but is not limited to hard wire cabling e.g.,parallel or serial cables, RS232, RS485, USB cable, Firewire (1394connectivity) cables, Ethernet, and the appropriate communication portconfiguration. The wireless connection will operate under any of thevarious wireless protocols including but not limited to Bluetooth™interconnectivity, infrared connectivity, radio transmissionconnectivity including computer digital signal broadcasting andreception commonly referred to as Wi-Fi or 802.11.X (where x denotes thetype of transmission), satellite transmission or any other type ofcommunication protocols, communication architecture or systems currentlyexisting or to be developed for wirelessly transmitting data includingspread spectrum 900 MHz, or other frequencies, Zigbee, WiFi, or any meshenabled wireless communication.

The IED 10 may communicate to a server or other computing device via thecommunication device 24. The IED 10 may be connected to a communicationsnetwork, e.g., the Internet, by any means, for example, a hardwired orwireless connection, such as dial-up, hardwired, cable, DSL, satellite,cellular, PCS, wireless transmission (e.g., 802.11a/b/g), etc. It is tobe appreciated that the network may be a local area network (LAN), widearea network (WAN), the Internet or any network that couples a pluralityof computers to enable various modes of communication via networkmessages. Furthermore, the server will communicate using variousprotocols such as Transmission Control Protocol/Internet Protocol(TCP/IP), File Transfer Protocol (FTP), Hypertext Transfer Protocol(HTTP), etc. and secure protocols such as Hypertext Transfer ProtocolSecure (HTTPS), Internet Protocol Security Protocol (IPSec),Point-to-Point Tunneling Protocol (PPTP), Secure Sockets Layer (SSL)Protocol, etc.

In an additional embodiment, the IED 10 will also have the capability ofnot only digitizing waveforms, but storing the waveform and transferringthat data upstream to a central computer, e.g., a remote server, when anevent occurs such as a voltage surge or sag or a current short circuit.This data will be triggered and captured on an event, stored to memory,e.g., non-volatile RAM, and additionally transferred to a host computerwithin the existing communication infrastructure either immediately, inresponse to a request from a remote device or computer to receive saiddata, and/or in response to a polled request. The digitized waveformwill also allow the CPU 50 to compute other electrical parameters suchas harmonics, magnitudes, symmetrical components and phasor analysis.Using the harmonics, the IED 10 will also calculate dangerous heatingconditions and can provide harmonic transformer derating based onharmonics found in the current waveform.

In a further embodiment, the IED 10 will execute an e-mail client andwill send e-mails to the utility or to the customer direct on anoccasion that a power quality event occurs. This allows utilitycompanies to dispatch crews to repair the condition. The data generatedby the meters are used to diagnose the cause of the condition. The datamay be transferred through the infrastructure created by the electricalpower distribution system. The email client will utilize a POP3 or otherstandard mail protocol. A user will program the outgoing mail server andemail address into the meter. An exemplary embodiment of said meteringis available in U.S. Pat. No. 6,751,563, which all contents thereof areincorporated by reference herein.

The techniques of the present disclosure can be used to automaticallymaintain program data and provide field wide updates upon which IEDfirmware and/or software can be upgraded. An event command can be issuedby a user, on a schedule or by digital communication that will triggerthe IED 10 to access a remote server and obtain the new program code.This will ensure that program data will also be maintained allowing theuser to be assured that all information is displayed identically on allunits.

It is to be understood that the present disclosure may be implemented invarious forms of hardware, software, firmware, special purposeprocessors, or a combination thereof. The IED 10 also includes anoperating system and micro instruction code. The various processes andfunctions described herein may either be part of the micro instructioncode or part of an application program (or a combination thereof) whichis executed via the operating system.

It is to be further understood that because some of the constituentsystem components and method steps depicted in the accompanying figuresmay be implemented in software, or firmware, the actual connectionsbetween the system components (or the process steps) may differdepending upon the manner in which the present disclosure is programmed.Given the teachings of the present disclosure provided herein, one ofordinary skill in the related art will be able to contemplate these andsimilar implementations or configurations of the present disclosure.

Furthermore, it is to be appreciated that the components and devices ofthe IED 10 of FIG. 1 may be disposed in various housings depending onthe application or environment. For example, the IED 10 may beconfigured as a panel meter 900 as shown in FIG. 2A an 2B. The panelmeter 900 of FIGS. 2A and 2B is described in more detail in commonlyowned U.S. Pat. No. 7,271,996, the contents of which are hereby oratedby reference. As seen in FIGS. 2A and 2B, the IED 900 includes a housing902 defining a front surface 902 a, a rear surface 902 b, a top surface902 c, a bottom surface 902 d, a right side surface 902 e, and a leftside surface (not shown). Electrical device 900 includes a face plate904 operatively connected to front surface 902 a of housing 902. Faceplate 904 includes displays 906, indicators 908 (e.g., LEDs and thelike), buttons 910, and the like providing a user with an interface forvisualization and operation of electrical device 100. For example, asseen in FIG. 2A, face plate 904 of electrical device 900 includes analogand/or digital displays 906 capable of producing alphanumericcharacters. Face plate 904 includes a plurality of indicators 908 which,when illuminated, indicate to the user the “type of reading”, the “% ofload bar”, the “parameter designation” which indicates the reading whichis being displayed on displays 906, a “scale selector” (e.g., Kilo orMega multiplier of Displayed Readings), etc. Face plate 904 includes aplurality of buttons 910 (e.g., a “menu” button, an “enter” button, a“down” button, a “right” button, etc.) for performing a plurality offunctions, including and not limited to: viewing of meter information;enter display modes; configuring parameters; performing re-sets;performing LED checks; changing settings; viewing parameter values;scrolling parameter values; and viewing limit states. The housing 902includes voltage connections or inputs 912 provided on rear surface 902b thereof, and current inputs 914 provided along right side surface 902e thereof. The IED 900 may include a first interface or communicationport 916 for connection to a master and/or slave device. Desirably,first communication port 916 is situated in rear surface 902 b ofhousing 902. IED 900 may also include a second interface orcommunication port 918 situated on face plate 904.

In another embodiment, the IED 10 may be configured as a socket meter920, also known as a S-base type meter or type S meter, as shown in FIG.2C an 2D. The socket meter 920 of FIGS. 2C and 2D is described in moredetail in commonly owned application Ser. No. 12/578,062 (U.S.Publication No. 2010/0090680), the contents of which are herebyincorporated by reference. Referring to FIGS. 2C and 2D, the meter 920includes a main housing 922 surrounded by a cover 924. The cover 924 ispreferably made of a clear material to expose a display 926 disposed onthe main body 922. An interface 928 to access the display and acommunication port 930 is also provided and accessible through the cover924. The meter 920 further includes a plurality of current terminals 932and voltage terminals 934 disposed on backside of the meter extendingthrough a base 935. The terminals 932, 934 are designed to mate withmatching jaws of a detachable meter-mounting device, such as a revenuemeter socket. The socket is hard wired to the electrical circuit and isnot meant to be removed. To install an S-base meter, the utility needonly plug in the meter into the socket. Once installed, a socket-sealingring 936 is used as a seal between the meter 920 and/or cover 924 andthe meter socket to prevent removal of the meter and to indicatetampering with the meter.

In a further embodiment, the IED 10 of FIG. 1 may be disposed in aswitchboard or draw-out type housing 940 as shown in FIGS. 2E and 2F,where FIG. 2E is a front view and FIG. 2F is a rear view. Theswitchboard enclosure 942 usually features a cover 944 with atransparent face 946 to allow the meter display 948 to be read and theuser interface 950 to be interacted with by the user. The cover 944 alsohas a sealing mechanism (not shown) to prevent unauthorized access tothe meter. A rear surface 952 of the switchboard enclosure 942 providesconnections for voltage and current inputs 954 and for variouscommunication interfaces 956. Although not shown, the meter disposed inthe switchboard enclosure 942 may be mounted on a draw-out chassis whichis removable from the switchboard enclosure 942. The draw-out chassisinterconnects the meter electronics with the electrical circuit. Thedraw-out chassis contains electrical connections which mate withmatching connectors 954, 956 disposed on the rear surface 952 of theenclosure 942 when the chassis is slid into place.

In yet another embodiment, the IED 10 of FIG. 1 may be disposed in anA-base or type A housing as shown in FIGS. 2G and 2H. A-base meters 960feature bottom connected terminals 962 on the bottom side of the meterhousing 964. These terminals 962 are typically screw terminals forreceiving the conductors of the electric circuit (not shown). A-basemeters 960 further include a meter cover 966, meter body 968, a display970 and input/output means 972. Further, the meter cover 966 includes aninput/output interface 974. The cover 966 encloses the meter electronics968 and the display 970. The cover 966 has a sealing mechanism (notshown) which prevents unauthorized tampering with the meter electronics.

It is to be appreciated that other housings and mounting schemes, e.g.,circuit breaker mounted, are contemplated to be within the scope of thepresent disclosure.

FIG. 3 illustrates an exemplary environment 100 in which the presentdisclosure may be practiced. The network 120 may be the Internet, apublic or private intranet, an extranet, wide area network (WAN), localarea network (LAN) or any other network configuration to enable transferof data and commands. An example network configuration uses theTransport Control Protocol/Internet Protocol (“TCP/IP”) network protocolsuite, however, other Internet Protocol based networks are contemplatedby the present disclosure. Communications may also include IP tunnelingprotocols such as those that allow virtual private networks couplingmultiple intranets or extranets together via the Internet. The network120 may support existing or envisioned application protocols, such as,for example, telnet, POP3, Mime, HTTP, HTTPS, PPP, TCP/IP, SMTP,proprietary protocols, or any other network protocols. During operation,the IED 110 may communicate using the network 120 as will be hereinafterdiscussed.

It is to be appreciated that are at least two basic types of networks,based on the communication patterns between the machines: client/servernetworks and peer-to-peer networks. On a client/server network, everycomputer, device or IED has a distinct role: that of either a client ora server. A server is designed to share its resources among the clientcomputers on the network. A dedicated server computer often has fasterprocessors, more memory, and more storage space than a client because itmight have to service dozens or even hundreds of users at the same time.High-performance servers typically use from two to eight processors (andthat's not counting multi-core CPUs), have many gigabytes of memoryinstalled, and have one or more server-optimized network interface cards(NICs), RAID (Redundant Array of Independent Drives) storage consistingof multiple drives, and redundant power supplies. Servers often run aspecial network OS—such as Windows Server, Linux, or UNIX—that isdesigned solely to facilitate the sharing of its resources. Theseresources can reside on a single server or on a group of servers. Whenmore than one server is used, each server can “specialize” in aparticular task (file server, print server, fax server, email server,and so on) or provide redundancy (duplicate servers) in case of serverfailure. For demanding computing tasks, several servers can act as asingle unit through the use of parallel processing. A client devicetypically communicates only with servers, not with other clients. Aclient system may be a standard PC that is running an OS such asWindows. Current OSes contain client software that enables the clientcomputers to access the resources that servers share. Older OSes, suchas Windows 3.x and DOS, required add-on network client software to joina network. By contrast, on a peer-to-peer network, every computer ordevice is equal and can communicate with any other computer or device onthe network to which it has been granted access rights. Essentially,every computer or device on a peer-to-peer network can function as botha server and a client; any computer or device on a peer-to-peer networkis considered a server if it shares a printer, a folder, a drive, orsome other resource with the rest of the network. Note that the actualnetworking hardware (interface cards, cables, and so on) is the same inclient/server versus peer-to-peer networks, it is only the logicalorganization, management and control of the network that varies.

The PC client 102 may comprise any computing device, such as a server,mainframe, workstation, personal computer, hand held computer, laptoptelephony device, network appliance, other IED, Programmable LogicController, Power Meter, Protective Relay etc. The PC client 102includes system memory 104, which may be implemented in volatile and/ornon-volatile devices. One or more client applications 106 which mayexecute in the system memory 104 is provided. Such client applicationsmay include, for example, FTP client applications. File TransferProtocol (FTP) is an application for transfer of files between computersattached to Transmission Control Protocol/Internet Protocol (TCP/IP)networks, including the Internet. FTP is a “client/server” application,such that a user runs a program on one computer system, the “client”,which communicates with a program running on another computer system,the “server”. Additionally, user interfaces 108 may be included fordisplaying system configuration, retrieved data and diagnosticsassociated with the IED 110.

The intelligent electronic device (IED) 110, in one embodiment, iscomprised of at least an FTP Server 131 including a Virtual Command FileProcessor 133, a File System and Driver 135, a non-volatile memory 137and a virtual data store 139. Of course, the IED 110 may contain otherhardware/software for performing functions associated with the IED,however, these functions are not relevant to the present application andwill therefore not be further discussed.

IED 110 runs the FTP Server 131 as an independent process in theoperating system, allowing it to function independently of the otherrunning processes. Additionally, it allows for multiple connections,using the port/socket architecture of TCP/IP.

By running the FTP Server 131 as an independent process, this means thatother systems, such as a Modbus TCP handler, can run on IED 110concurrently with the FTP Server 131. This also means that multiple FTPconnections can be made with the only limitation being the system'savailable resources.

The FTP Server 131 provides access to the file system 135 of the IED 110on the standard FTP port (port 21). When a connection is made, PC client102 sends a FTP logon sequence, which includes a USER command and a PASScommand. The PC client 102 then interacts with the IED 110, requestinginformation and writing files, ending in a logout.

The FTP Server 131 uses two ports for all actions. The first port 21, isa clear ASCII telnet channel, and is called the command channel. Thesecond port, which can have a different port number in differentapplications, is initiated whenever it is necessary to transfer data inclear binary, and is called the data channel.

The virtual data store 139 is an ideal storage medium for files that arewritten to very frequently, such as, for example, status information,diagnostics, and virtual command files. In contrast to these types offiles are files which require more long term storage, such as, forexample, Logs, settings, and configuration, a more suitable to be storedusing a compact flash drive.

The File Transfer Protocol (FTP) (Port 21) is a network protocol used totransfer data from one computer to another through a network, such asover the Internet. FTP is a commonly used protocol for exchanging filesover any TCP/IP based network to manipulate files on another computer onthat network regardless of which operating systems are involved (if thecomputers permit FTP access). There are many existing FTP client andserver programs. FTP servers can be set up anywhere between gameservers, voice servers, internet hosts, and other physical servers.

FTP runs exclusively over TCP. FTP servers by default listen on port 21for incoming connections from FTP clients. A connection to this portfrom the FTP Client forms the control stream on which commands arepassed to the FTP server from the FTP client and on occasion from theFTP server to the FTP client. FTP uses out-of-band control, which meansit uses a separate connection for control and data. Thus, for the actualfile transfer to take place, a different connection is required which iscalled the data stream. Depending on the transfer mode, the process ofsetting up the data stream is different.

In active mode, the FTP client opens a dynamic port (49152-65535), sendsthe FTP server the dynamic port number on which it is listening over thecontrol stream and waits for a connection from the FTP server. When theFTP server initiates the data connection to the FTP client it binds thesource port to port 20 on the FTP server.

To use active mode, the client sends a PORT command, with the IP andport as argument. The format for the IP and port is “h1,h2,h3,h4,p1,p2”.Each field is a decimal representation of 8 bits of the host IP,followed by the chosen data port. For example, a client with an IP of192.168.0.1, listening on port 49154 for the data connection will sendthe command “PORT 192,168,0,1,192,2”. The port fields should beinterpreted as p1×256+p2=port, or, in this example, 192×256+2=49154.

In passive mode, the FTP server opens a dynamic port (49152-65535),sends the FTP client the server's IP address to connect to and the porton which it is listening (a 16 bit value broken into a high and lowbyte, like explained before) over the control stream and waits for aconnection from the FTP client. In this case the FTP client binds thesource port of the connection to a dynamic port between 49152 and 65535.

To use passive mode, the client sends the PASV command to which theserver would reply with something similar to “227 Entering Passive Mode(127,0,0,1,192,52)”. The syntax of the IP address and port are the sameas for the argument to the PORT command.

In extended passive mode, the FTP server operates exactly the same aspassive mode, however it only transmits the port number (not broken intohigh and low bytes) and the client is to assume that it connects to thesame IP address that was originally connected to.

The objectives of FTP are to promote sharing of files (computer programsand/or data), to encourage indirect or implicit use of remote computers,to shield a user from variations in file storage systems among differenthosts and to transfer data reliably, and efficiently.

In one embodiment of the present disclosure, the IED 110 has the abilityto provide an external PC client 102 with an improved data transfer ratewhen making data download requests of data stored within an IED. This isachieved by configuring the IED 110 to include an FTP server 131including a Virtual Command File Processor 133. An improved datatransfer rate from the IED 110 may be realized by the external PC client102 issuing virtual commands to the IED 110. In response, the IED 110processes the received virtual commands in the Virtual Command Fileprocessor 133 to construct FTP commands therefrom to be applied to anovel file system 135 of the IED 110, coupled to the FTP server 131,wherein the novel file system 135 is configured as a PC file structureamenable to receiving and responding to the constructed FTP commands.The Virtual command files and the novel file system 135 are discussed ingreater detail in co-pending application Ser. No. 12/061,979.

While FTP file transfer comprises one embodiment for encapsulating filesto improve a data transfer rate from an IED to external PC clients, thepresent disclosure contemplates the use of other file transferprotocols, such as the Ethernet protocol such as HTTP or TCP/IP forexample. Of course, other Ethernet protocols are contemplated for use bythe present disclosure. For example, for the purpose of security andfirewall access, it may be preferable to utilize HTTP file encapsulationas opposed to sending the data via FTP. In other embodiments, data canbe attached as an email and sent via SMTP, for example. Such a system isdescribed in a co-owned U.S. Pat. No. 6,751,563, titled “ElectronicEnergy meter”, the contents of which are incorporated herein byreference. In the U.S. Pat. No. 6,751,563, at least one processor of theIED or meter is configured to collect the at least one parameter andgenerate data from the sampled at least one parameter, wherein the atleast one processor is configured to act as a server for the IED ormeter and is further configured for presenting the collected andgenerated data in the form of web pages.

Portions of U.S. Pat. No. 6,751,563 will be reproduced here. FIG. 4 is ablock diagram of a web server power quality and revenue meter 210. Themeter is connected to monitor electric distribution power lines (notshown), to monitor voltage and current at the point of connection.Included therein is digital sampler 220 for digitally sampling thevoltage and current of the power being supplied to a customer ormonitored at the point of the series connection in the power grid.Digital sampler 220 digitally samples the voltage and current andperforms substantially similar to the A/D converters 14 described abovein relation to FIG. 1 . The digital samples are then forwarded toprocessor 230 for processing. It is to be appreciated that the processormay be a single processing unit or a processing assembly including atleast one CPU 50, DSP1 60, DSP2 70 and FPGA 80, or any combinationthereof. Also connected to processor 230 is external device interface240 for providing an interface for external devices 250 to connect tometer 210. These external devices might include other power meters,sub-station control circuitry, on/off switches, etc. Processor 230receives data packets from digital sampler 220 and external devices 250,and processes the data packets according to user defined or predefinedrequirements. A memory 260 is connected to processor 230 for storingdata packets and program algorithms, and to assist in processingfunctions of processor 230. These processing functions include the powerquality data and revenue calculations, as well as formatting data intodifferent protocols which will be described later in detail. Processor130 provides processed data to network 280 through network interface270. Network 280 can be the Internet, the World Wide Web (WWW), anintranet, a wide area network (WAN), or local area network (LAN), amongothers. In one embodiment, the network interface converts the data to anEthernet TCP/IP format. The use of the Ethernet TCP/IP format allowsmultiple users to access the power meter simultaneously. In a likefashion, network interface 270 might be comprised of a modem, cableconnection, or other devices that provide formatting functions.Computers 290-292 are shown connected to network 280.

A web server program (web server) is contained in memory 260, andaccessed through network interface 270. The web server provides realtime data through any known web server interface format. For example,popular web server interface formats consist of HTML and XML (ExtensibleMarkup Language) formats. The actual format of the programming languageused is not essential to the present disclosure, in that any web serverformat can be incorporated herein. The web server provides a userfriendly interface for the user to interact with the meter 210. The usercan have various access levels to enter limits for e-mail alarms.Additionally, the user can be provided the data in a multiple of formatsincluding raw data, bar graph, charts, etc. The currently used HTML orXML programming languages provide for easy programming and user friendlyuser interfaces.

The processor 230 formats the processed data into various networkprotocols and formats. The protocols and formats can, for example,consist of the web server HTML or XML formats, Modbus TCP, RS-485, FTPor e-mail. Dynamic Host Configuration Protocol (DHCP) can also be usedto assign IP addresses. The network formatted data is now available tousers at computers 290-292 through network 280, that connects to meter210 at the network interface 270. In one embodiment, network interface270 is an Ethernet interface that supports, for example, 100 base-T or10 base-T communications. This type of network interface can send andreceive data packets between WAN connections and/or LAN connections andthe meter 210. This type of network interface allows for situations, forexample, where the web server may be accessed by one user while anotheruser is communicating via the Modbus TCP, and a third user may bedownloading a stored data file via FTP. The ability to provide access tothe meter by multiple users, simultaneously, is a great advantage overthe prior art. This can allow for a utility company's customer servicepersonnel, a customer and maintenance personnel to simultaneously andinteractively monitor and diagnose possible problems with the powerservice.

FIG. 5 is a functional block diagram of processor 230 of the web serverpower quality and revenue meter system according to the embodiment ofthe present disclosure. Processor 230 is shown containing four mainprocessing functions. The functions shown are illustrative and not meantto be inclusive of all possible functions performed by processor 230.Power Quality and Revenue Metering functions (metering functions) 310consists of a complete set of functions which are needed for powerquality and revenue metering. Packet data collected by digital sampler220 is transmitted to processor 230. Processor 230 calculates, forexample, power reactive power, apparent power, and power factor. Themetering function 310 responds to commands via the network or otherinterfaces supported by the meter. External Device Routing Functions 330handle the interfacing between the external device 250 and meter 210.Raw data from external device 250 is fed into meter 210. The externaldevice 250 is assigned a particular address. If more than one externaldevice is connected to meter 210, each device will be assigned a uniqueparticular address. The Network Protocol Functions 350 of meter 210 areexecuted by processor 230 which executes multiple networking tasks thatare running concurrently. As shown in FIG. 5 , these include, but arenot limited to, the following network tasks included in network protocolfunctions 350: e-mail 360, web server 370, Modbus TCP 380, FTP 390, andDHCP 300. The e-mail 360 network protocol function can be utilized tosend e-mail messages via the network 280 to a user to, for example,notify the user of an emergency situation or if the power consumptionreaches a user-set or pre-set high level threshold. As the processorreceives packets of data it identifies the network processing necessaryfor the packet by the port number associated with the packet. Theprocessor allocates the packet to a task as a function of the portnumber. Since each task is running independently the meter 210 canaccept different types of requests concurrently and process themtransparently from each other. For example, the web server may beaccessed by one user while another user is communicating via Modbus TCPand at the same time a third user may download a log file via FTP. TheNetwork to Meter Protocol Conversion Function 340 is used to format andprotocol convert the different network protocol messages to a commonformat understood by the other functional sections of meter 210. Afterthe basic network processing of the packet of data, any “commands” ordata which are to be passed to other functional sections of meter 210are formatted and protocol converted to a common format for processingby the Network to Meter Protocol Conversion Function 340. Similarly,commands or data coming from the meter for transfer over the network arepre-processed by this function into the proper format before being sentto the appropriate network task for transmission over the network. Inaddition this function first protocol converts and then routes data andcommands between the meter and external devices.

Although the above described embodiments enable users outside of thenetwork the IED or meter is residing on to access the internal memory orserver of the IED or meter, IT departments commonly block this accessthrough a firewall to avoid access by dangerous threats into corporatenetworks. A firewall is a system designed to prevent unauthorized accessto or from a private network, e.g., an internal network of a building, acorporate network, etc. Firewalls can be implemented in both hardwareand software, or a combination of both. Firewalls are frequently used toprevent unauthorized Internet users from accessing private networksconnected to the Internet, especially intranets. All messages enteringor leaving the intranet pass through the firewall, which examines eachmessage and blocks those that do not meet the specified securitycriteria. A firewall may employ one or more of the following techniquesto control the flow of traffic in and of the network it isprotecting: 1) packet filtering: looks at each packet entering orleaving the network and accepts or rejects it based on user-definedrules; 2) Application gateway: applies security mechanisms to specificapplications, such as FTP and Telnet servers; 3) Circuit-level gateway:applies security mechanisms when a TCP or UDP connection is established,once the connection has been made, packets can flow between the hostswithout further checking; 4) Proxy server: intercepts all messagesentering and leaving the network, effectively hides the true networkaddresses; and 5) Stateful inspection: doesn't examine the contents ofeach packet but instead compares certain key parts of the packet to adatabase of trusted information, if the comparison yields a reasonablematch, the information is allowed through, otherwise it is discarded.Other techniques and to be developed techniques are contemplated to bewithin the scope of the present disclosure.

In one embodiment, the present disclosure provides for overcoming theproblem of not being allowed firewall access to an IED or meterinstalled within a facility, i.e., the meter is residing on a privatenetwork, by enabling an IED to initiate one way communication throughthe firewall. In this embodiment, the IED or meter posts the monitoredand generated data on an Internet site, e.g., hosted on a server or theMeter Data Cloud, external to the corporate or private network, i.e., onthe other side of a firewall. The benefit is that any user would be ableto view the data on any computer or web enabled smart device withouthaving to pierce or bypass the firewall. Additionally, there is abusiness opportunity to host this data on a web server and charge a usera monthly fee for hosting the data. The features of this embodiment canbe incorporated into any telemetry application including vending, energymetering, telephone systems, medical devices and any application thatrequires remotely collecting data and posting it on to a public Internetweb site.

In one embodiment, the IED or metering device will communicate throughthe firewall using a protocol such as HTTP via a port that is openthrough the firewall. Referring to FIG. 6 ., IEDs or meters 410, 412,414 reside on an internal network 416, e.g., an intranet, privatenetwork, corporate network, etc. The internal network 416 is coupled toan external network 422, e.g., the Internet, via a router 420 or similardevice over any known hardwire or wireless connection 421. A firewall418 is disposed between the internal network 416 and external network422 to prevent unauthorized access from outside the internal network 416to the IEDs or meters 410, 412, 414. Although the firewall 418 is shownbetween the internal network 416 and the router 420 it is to beappreciated that other configurations are possible, for example, thefirewall 418 being disposed between the router 420 and external network422. In other embodiments, the firewall 418 and router 420 may beconfigured as a single device. In another embodiment, a firewall 418 maybe located between network 422 and server 424. It is further to beappreciated that firewall 418 can be implemented in both hardware andsoftware, or a combination of both.

The communication device or network interface of the meter (as describedabove in relation to FIG. 1 ) will communicate through the firewall 418and read a web site server 424. It is to be appreciated that the one waycommunication from the IED through the firewall may be enabled byvarious techniques, for example, by enabling outbound traffic to the IPaddress or domain name of the server 424 or by using a protocol that hasbeen configured, via the firewall settings, to pass through the firewallsuch as HTTP (Hyper Text Transfer Protocol), IP (Internet Protocol), TCP(Transmission Control Protocol), FTP (File Transfer Protocol), UDP (UserDatagram Protocol), ICMP (Internet Control Message Protocol), SMTP(Simple Mail Transport Protocol), SNMP (Simple Network ManagementProtocol), Telnet, etc. Alternatively, the IED may have exclusive accessto a particular port on the firewall, which is unknown to other users oneither the internal or external network. Other methods or techniques arecontemplated, for example, e-mail, HTTP tunneling, SNTP trap, MSN,messenger, IRQ, Twitter™, Bulletin Board System (BBS), forums, UniversalPlug and Play (UPnP), User Datagram Protocol (UDP) broadcast, UDPunicast, Virtual Private Networks (VPN), etc.

The server 424 will provide instructions in computer and/or humanreadable format to the IED or meter. For instance, the web server 424might have XML tags that state in computer readable format to providedata for the last hour on energy consumption by 15 minute intervals. Themeter 410, 412, 414 will then read those instructions on that web server424 and then post that data up on the server 424. In this manner, theIED or meter initiates communication in one direction, e.g., an outbounddirection, to the server 424.

Another server (or can be in one server) will read the data that themeter 410, 412, 414 posts and will format the meter data into data thatcan be viewed for humans on a web site or a software application, i.e.,UI Server 426. Servers 424, 426 can also store the data in a database orperform or execute various control commands on the data. Clients 428 mayaccess the IED data stored or posted on servers 424, 426 via aconnection to the network 422.

Since the meters are only communicating in an outbound direction only,the meters 410, 412, 414 can read data or instructions from an externalnetwork application (e.g., server 424), the external network applicationcannot request information directly from the meter. The server 424 poststhe data or instructions on the web site and waits for the meter tocheck the site to see if there has been a new post, i.e., newinstructions for the meter. The meter can be programmed at the user'sdiscretion as to frequency for which the meter 410, 412, 414 exits outto the external network to view the postings.

The meter instruction server 424 will post instructions in a directoryprogrammed/located on the server or into XML or in any fashion that themeter is configured to understand and then the meter will post whateverdata it is instructed to do. The meter can also be configured toaccomplish control commands. In addition to the meter instruction server424, a user interface (UI) server 426 is provided that can be used toenable a user interface to the user. The user can provide input on theUI server 426 that might trigger the meter instruction server 424 toproduce a message to control the energy next time the meter reads thatserver.

Referring to FIG. 7 , a method for communicating data from an IED on aninternal network to a server on an external network through a firewallis illustrated. In step 452, the IED 410 communicates through thefirewall 418 to a predetermined server 424 on an external network 422.The IED 410 may be programmed to periodically communicate to the serverat predefined intervals. During this communication session, the IED 410reads instructions disposed in a directory or folder on thepredetermined server 424, step 454. Next, in step 456, the IED 410collects data from its internal memory or generates data based on theread instructions. The IED 410 then transmits the data to the server 424in a predetermined format, e.g., XML, CSV, etc., step 458. In step 460,the predetermined server 424 posts the received data on a web siteaccessible from the external network 422. The data may be posted on theserver 424 or a UI (user interface) server 426 configured to provideddata for end users, e.g., clients 428. It is to be appreciated that theUI server 426 may be configured to post data from several locations inone convenient interface for, for example, an organization managing theseveral locations. A provider of the servers 424, 426 may charge a feeto the end user for the hosting of the web site and providing the datain a convenient and accessible format.

In another embodiment, the IED or metering device will communicatethrough the firewall using a server 530 disposed on an internal networkprotected by a firewall. Referring to FIG. 8 ., IEDs or meters 510, 512,514 reside on an internal network 516, e.g., an intranet, privatenetwork, corporate network, etc. The internal network 516 is coupled toan external network 522, e.g., the Internet, via a router 520 or similardevice over any known hardwire or wireless connection 521. A firewall518 is disposed between the internal network 516 and external network522 to prevent unauthorized access from outside the internal network 516to the IEDs or meters 510, 512, 514. Although the firewall 518 is shownbetween the internal network 516 and the router 520 it is to beappreciated that other configurations are possible, for example, thefirewall 518 being disposed between the router 520 and external network522. In other embodiments, the firewall 518 and router 520 may beconfigured as a single device. In another embodiment, a firewall 418 maybe located between network 422 and server 424. It is further to beappreciated that firewall 518 can be implemented in both hardware andsoftware, or a combination of both.

In this embodiment, server 530 aggregates data from the various IEDs510, 512, 514 coupled to the internal or private network 516. Since theserver 530 and the IEDs 510, 512, 514 are all on the same side of thefirewall 518, generally communications and data transfers among theserver 530 and the IEDs 510, 512, 514 is unrestricted. Server 530 thencommunicates or transfers the data from the IEDs to server 524 on theexternal network on the other side of the firewall 518. Thecommunication between server 530 and 524 may be accomplished by any oneof the communication means or protocols described in the presentdisclosure. The server 524 then posts the data from the IEDs 510, 512,514 making the data accessible to clients 528 on external networks, asdescribed above.

In a further embodiment, the IED or metering device will communicatethrough the firewall using a server 630 disposed on an internal networkprotected by a firewall. Referring to FIG. 9 ., IEDs or meters 610, 612,614 reside on an internal network 616, e.g., an intranet, privatenetwork, corporate network, etc. The internal network 616 is coupled toan external network 622, e.g., the Internet, via a router 620 or similardevice over any known hardwire or wireless connection 621. A firewall618 is disposed between the internal network 516 and external network622 to prevent unauthorized access from outside the internal network 616to the IEDs or meters 610, 612, 614. Although the firewall 618 is shownbetween the internal network 616 and the router 620 it is to beappreciated that other configurations are possible, for example, thefirewall 618 being disposed between the router 620 and external network622. In other embodiments, the firewall 618 and router 620 may beconfigured as a single device. In another embodiment, a firewall 418 maybe located between network 422 and server 424. It is further to beappreciated that firewall 618 can be implemented in both hardware andsoftware, or a combination of both.

In this embodiment, server 630 aggregates data from the various IEDs610, 612, 614 coupled to the internal or private network 616. Since theserver 630 and the IEDs 610, 612, 614 are all on the same side of thefirewall 618, generally communications and data transfers among theserver 630 and the IEDs 610, 612, 614 is unrestricted. Server 630 thencommunicates or transfers the data from the IEDs to clients 628 on theexternal network on the other side of the firewall 618. Thecommunication between server 630 and clients 628 may be accomplished byany one of the communication means or protocols described in the presentdisclosure.

In another embodiment, each IED 610, 612, 614 may be configured to actas a server to perform the functionality described above obviating theneed for server 630.

Furthermore, in another embodiment, each IED 610, 612, 614 and eachclient device 628 may be configured as a server to create a peer-to-peernetwork, token ring or a combination of any such topology.

The systems and methods of the present disclosure may utilize one ormore protocols and/or communication techniques including, but notlimited to, e-mail, File Transfer Protocol (FTP), HTTP tunneling, SNTPtrap, MSN, messenger, IRQ, Twitter™, Bulletin Board System (BBS),forums, Universal Plug and Play (UPnP), User Datagram Protocol (UDP)broadcast, UDP unicast, Virtual Private Networks (VPN), etc.

In one non-limiting embodiment, each IED sends data to a recipient viaelectronic mail, also known as email or e-mail. An Internet emailmessage consists of three components, the message envelope, the messageheader, and the message body. The message header contains controlinformation, including, minimally, an originator's email address and oneor more recipient addresses. Usually descriptive information is alsoadded, such as a subject header field and a message submission date/timestamp. Network-based email was initially exchanged on the ARPANET inextensions to the File Transfer Protocol (FTP), but is now carried bythe Simple Mail Transfer Protocol (SMTP), first published as Internetstandard 10 (RFC 821) in 1982. In the process of transporting emailmessages between systems, SMTP communicates delivery parameters using amessage envelope separate from the message (header and body) itself.Messages are exchanged between hosts using the Simple Mail TransferProtocol with software programs called mail transfer agents (MTAs); anddelivered to a mail store by programs called mail delivery agents (MDAs,also sometimes called local delivery agents, LDAs). Users can retrievetheir messages from servers using standard protocols such as POP orIMAP, or, as is more likely in a large corporate environment, with aproprietary protocol specific to Novell Groupwise, Lotus Notes orMicrosoft Exchange Servers. Webmail interfaces allow users to accesstheir mail with any standard web browser, from any computer, rather thanrelying on an email client. Programs used by users for retrieving,reading, and managing email are called mail user agents (MUAs). Mail canbe stored on the client, on the server side, or in both places. Standardformats for mailboxes include Maildir and mbox. Several prominent emailclients use their own proprietary format and require conversion softwareto transfer email between them. Server-side storage is often in aproprietary format but since access is through a standard protocol suchas IMAP, moving email from one server to another can be done with anyMUA supporting the protocol.

In one embodiment, the IED composes a message using a mail user agent(MUA). The IED enters the email address of a recipient and sends themessage. The MUA formats the message in email format and uses theSubmission Protocol (a profile of the Simple Mail Transfer Protocol(SMTP), see RFC 6409) to send the message to the local mail submissionagent (MSA), for example, run by the IED's internet service provider(ISP). The MSA looks at the destination address provided in the SMTPprotocol (not from the message header). An Internet email address is astring of the form recipient@meter. The part before the @ sign is thelocal part of the address, often the username of the recipient, and thepart after the @ sign is a domain name or a fully qualified domain name.The MSA resolves a domain name to determine the fully qualified domainname of the mail exchange server in the Domain Name System (DNS). TheDNS server for the domain responds with any MX records listing the mailexchange servers for that domain, for example, a message transfer agent(MTA) server run by the recipient's ISP. The MSA sends the message toMTA using SMTP. This server may need to forward the message to otherMTAs before the message reaches the final message delivery agent (MDA).The MDA delivers it to the mailbox of the recipient. The recipientretrieves the message using either the Post Office Protocol (POP3) orthe Internet Message Access Protocol (IMAP4).

Other types of e-mail systems may also be employed, for example,web-based email, POP3 (Post Office Protocol 3) email services, IMAP(Internet Message Protocol) e-mail servers, and MAPI (MessagingApplication Programming Interface) email servers to name a few.

In a further embodiment, File Transfer Protocol (FTP) may be employed.Techniques for transferring data from an IED to a device is described incommonly owned pending U.S. patent application Ser. No. 12/061,979, thecontents of which are incorporated by reference.

In one embodiment, IEDs employ Universal Plug and Play (UPnP) protocol,which is a set of networking protocols that permits networked devices todiscover each other's presence, and notify clients of services availableon these devices. UPnP takes the form of UDP broadcast messages, whichare sent across a local network, to notify other devices of availableservices, and http requests to query the details of those devices andservices.

In one embodiment, UPnP is employed to allow the network addresses ofdevices, such as meters, to automatically be discovered by a client.This enables the client software to display a list of all devices whichare available. In addition, this could also allow the client software toenable the user to connect to these devices, without having to configurethe network address of that device. In addition, the UPnP notify may beused to indicate the health status of the device, including starting up,running, errors in configuration, and resetting.

In another embodiment, UPnP is employed to allow devices, such asmeters, to notify the clients of what services they support, such asmodbus, Distributed Network Protocol (DNP), web, FTP, log download, anddata streaming. This could be extended by including informationparticular to that service or protocol, such as to allow the client tointerface with that service with no user input. This could enable theclient software to display the device such that the user can focus onthe details of the device, rather then worrying about the minutiae ofconnection information.

In another embodiment, an automated server is configured to performactions related to these automatically discovered services, such asretrieving real time information, downloading logs, or registering fornotification of events. For example, as shown in FIG. 8 , a server 530could be on a network 516 to collect log information from meters 510,512, 514, and whenever a meter broadcast that it provided log data, theserver 530 could automatically collect that data from the meter. Asanother example, the server 530 could automatically poll and log therealtime readings of all meters on the network, automatically includingthem as they become available on the network. As described above, theserver 530 may then post the data to server 524.

In one embodiment, HTTP tunneling is employed to send a message(including the IED's or meter's data) to a server, which listens forsuch messages, and parses out the IED's or meter's data. This could beperformed by embedding the meter's data in a HTTP message, which couldbe sent to the server, for example, server 424 as shown in FIG. 6 . TheHTTP wrapper would allow this data to pass through firewalls which onlyallow web traffic. For example, in the architecture of FIG. 6 , IED 410may send a HTTP message containing measured or calculated data throughfirewall 418 to server 424 or server 430. In another example as shown inFIG. 8 , server 530 may collect data from the various IEDs 510, 512, 514and forward the collected data in a HTTP message through firewall 518 toserver 524.

It is to be appreciated that HTTP tunneling applies to systemarchitectures where a server is provided as the receiver of the IED ormeter data, as the clients would be unable to process such information.Referring to FIG. 9 , server 630 is the destination (and collects) themessages generated from the various IEDs 610, 612, 614, but device 628is a client, and without server software, would be unable to receive themessages. However, by programming device 628 with server software, theclient device 628 becomes a server and can receive the messages.

It is further to be appreciated that the HTTP message can be sent basedon various triggers including, but not limited to, time-based trigger,event-based trigger, storage capacity-based trigger, etc.

In another embodiment, the IEDs can communicate through to devices usinga Simple Network Management Protocol (SNMP) trap. SNMP traps enable anagent, e.g., an agent running on an IED, to notify a management station,e.g., a server, of significant events by way of an unsolicited SNMPmessage. Upon occurrence of an event, an agent that sends an unsolicitedor asynchronous trap to the network management system (NMS), also knownas a manager. After the manager receives the event, the manager displaysit and can choose to take an action based on the event. For instance,the manager can poll the agent or IED directly, or poll other associateddevice agents to get a better understanding of the event. For themanagement system to understand a trap sent to it by an agent, themanagement system must know what the object identifier (01D) of the trapor message defines. Therefore, the management system or server must havethe Management Information Base (MIB) for that trap loaded. Thisprovides the correct OID information so that the network managementsystem can understand the traps sent to it. Additionally, a device doesnot send a trap to a network management system unless it is configuredto do so. A device must know that it should send a trap. The trapdestination is usually defined by an IP address, but can be a host name,if the device is set up to query a Domain Name System (DNS) server.

Common chat protocols, such as MSN, AIM, IRQ, IRC, and Skype, could beused to send a message, containing the meter's data, to a public chatserver, e.g., server 440, 540, 640, which could then route that messageto any desired client and/or server, e.g., servers 424, 524. Anotherpossible implementation could be to have a special client that listensfor these messages, parses the data contents, and presents them inanother manner. In one embodiment, the messages are proprietary formatEthernet messages, typically sent over TCP. It is to be appreciated thatthe actual format depends on the specific chat protocol.

A public social server that supports a common web interface for postinginformation, such as Twitter™, Facebook™, BBS's, could be used to post astatus, containing the meter's data, to a user on the public socialserver for that service, e.g., server 440, 540, 640. This post couldthen be viewed by the clients to see the meter's data, read by anotherserver for further parsing and presentation or sent to servers 424, 524.The data could be formatted as human readable text (e.g., “The voltageis 120.2v”), as machine parsable text (e.g., “voltage.an=120.2”), hexrepresenting binary data (e.g., “0152BF5E”). The HTTP interface could beused, which would work the same way as a user updating it from theirbrowser (HTTP push). Some of these servers also provide a proprietaryformat Ethernet message, typically sent over TCP.

In one non-limiting example, a public social server such as the systememployed by Facebook may be utilized to post the IEDs data so the datais accessible on the external network outside of the firewall. Facebookuses a variety of services, tools and programming languages to make upits infrastructure which may be employed in the systems and methods ofthe present disclosure to implement the technique described herein. Inthe front end, the servers run a LAMP (Linux, Apache, MySQL and PHP)stack with Memcache. Linux is a Unix-like operating system kernel. It isopen source, highly customizable, and good for security. Facebook'sserver runs the Linux operating system Apache HTTP server. For thedatabase, Facebook uses MySQL for its speed and reliability. MySQL isused primarily as a key store of value when the data are randomlydistributed among a large number of cases logical. These logicalinstances extend across physical nodes and load balancing is done atphysical node. Facebook uses PHP, since it is a good web programminglanguage and is good for rapid iteration. PHP is a dynamically typedlanguage/interpreter. Memcache is a caching system that is used toaccelerate dynamic web sites with databases (like Facebook) by cachingdata and objects in RAM to reduce reading time. Memcache is the mainform of caching on Facebook and helps relieve the burden of database.Having a caching system allows Facebook to be as fast as it is toremember information. Furthermore, Facebook backend services are writtenin a variety of different programming languages like C++, Java, Python,and Erlang. Additionally, it employs the following services: 1.)Thrift—a lightweight remote procedure call framework for scalablecross-language services development, which supports C++, PHP, Python,Perl, Java, Ruby, Erlang, and others; 2.) Escribano (server logs)—aserver for aggregating log data streamed in real time on many otherservers, it is a scalable framework useful for recording a wide range ofdata; 3.) Cassandra (database)—a database designed to handle largeamounts of data spread out across many servers; 4.) HipHop for PHP—atransformer of source code for PHP script code and was created to saveserver resources, HipHop transforms PHP source code in C++optimized,among others. It is to be appreciated that any of the above systems,devices and/or services may be implemented in the various architecturesdisclosed in the present disclosure to achieve the teaching andtechniques described herein.

A public web site, e.g., hosting on server 440, 540, 640, which allowsthe posting of information, such as a Forum, could be used to post amessage, containing the meter's data, to a group, thread, or otherlocation. This post would take place by a HTTP POST to the web site'sserver, where by the server would store that information, and present iton the web site. This message could then be viewed by the clients to seethe meter's data, or read by another server for further parsing andpresentation. The data could be formatted as human readable text (e.g.,“The voltage is 120.2v”), as machine parsable text (e.g.,“voltage.an=120.2”), hex representing binary data (e.g., “0152BF5E”).The HTTP interface could be used, which would work the same way as auser updating it from their browser (HTTP push).

User Datagram Protocol (UDP) messages could be used to send a messagefrom the IEDs or meters to a server, which listens for such messages,and parses out the meter's data. When employing UDP broadcasts, messagescould be sent from the IEDs or meters to a server, e.g., servers 530,630, since UDP broadcasts do not work across networks. The messagescontaining the IED's or meter's data can then be sent to externalnetworks via any of the described (or to be developed) communicationmethods. Alternatively, a UDP unicast could support sending to anyserver, e.g., server 424, 524.

A Virtual Private Network (VPN) could be created such that each meter onthe internal network is part of the same virtual private network as eachof the clients. A Virtual Private Network (VPN) is a technology forusing the Internet or another intermediate network to connect computersto isolated remote computer networks that would otherwise beinaccessible. A VPN provides security so that traffic sent through theVPN connection stays isolated from other computers on the intermediatenetwork. VPNs can connect individual IEDs or meters to a remote networkor connect multiple networks together. Through VPNs, users are able toaccess resources on remote networks, such as files, printers, databases,or internal websites. VPN remote users get the impression of beingdirectly connected to the central network via a point-to-point link. Anyof the other described (or to be developed) protocols could then be usedto push data to another server or clients on the VPN.

Hosted data services, such as a hosted database, cloud data storage,Drop-Box, or web service hosting, could be used as an external server tostore the meter's data, called Hosting. Each of these Hosts, e.g.,servers 440, 540, 640, could then be accessed by the clients to querythe Hosted Data. Many of these hosted data services support HTTP Pushmessages to upload the data, or direct SQL messages. As many web serviceand cloud hosts allow their users to use their own software, a hosteddata service could be further extended by placing proprietary softwareon them, thus allowing them to act as the external meter server for anyof the previously mentioned methods (e.g., servers 424, 524).

In another embodiment, the IEDs can communicate to devices using GenericObject Oriented Substation Event (GOOSE) messages, as defined by theIEC-61850 standard, the content of which are herein incorporated byreference. A GOOSE message is a user-defined set of data that is“published” on detection of a change in any of the contained data itemssensed or calculated by the IED. Any IED or device on the LAN or networkthat is interested in the published data can “subscribe” to thepublisher's GOOSE message and subsequently use any of the data items inthe message as desired. As such, GOOSE is known as a Publish-Subscribemessage. With binary values, change detect is a False-to-True orTrue-to-False transition. With analog measurements, IEC61850 defines a“deadband” whereby if the analog value changes greater than the deadbandvalue, a GOOSE message with the changed analog value is sent. Insituation where changes of state are infrequent, a “keep alive” messageis periodically sent by the publisher to detect a potential failure. Inthe keepalive message, there is a data item that indicates “The NEXTGOOSE will be sent in XX Seconds” (where XX is a userdefinable time). Ifthe subscriber fails to receive a message in the specified time frame,it can set an alarm to indicate either a failure of the publisher or thecommunication network.

The GOOSE message obtains high-performance by creating a mapping of thetransmitted information directly onto an Ethernet data frame. There isno Internet Protocol (IP) address and no Transmission Control Protocol(TCP). For delivery of the GOOSE message, an Ethernet address known as aMulticast address is used. A Multicast address is normally delivered toall devices on a Local Area Network (LAN). Many times, the message isonly meant for a few devices and doesn't need to be delivered to alldevices on the LAN. To minimize Ethernet traffic, the concept of a“Virtual” LAN or VLAN is employed. To meet the reliability criteria ofthe IEC-61850, the GOOSE protocol automatically repeats messages severaltimes without being asked. As such, if the first GOOSE message gets lost(corrupted), there is a very high probability that the next message orthe next or the next will be properly received.

It is to be appreciated that the above-described one-way communicationembodiments may apply to systems other than for energy metering. Forexample, the present disclosure may be applied to a vending machine orsystem, wherein the vending machine located in a building or structurehaving a private or corporate network. The vending machine will include,among other data collecting components, at least a communication deviceor network interface as described above. The communication device ornetwork interface will coupled the vending machine to the internalnetwork which may be further coupled to the Internet via a firewall. Thevending machine may vend or dispense a plurality of items, such as sodacans, candy bars, etc., similar to the vending machine described in U.S.Pat. No. 3,178,055, the contents of which are incorporated by reference.In accordance with the present disclosure, the vending machine willmonitor and collect data related to the items sold. Such data mayinclude quantities of items sold, a re-stock limit that has beenreached, total revenue generated by the vending machine, etc. In oneembodiment, the vending machine will post to a web site, residing on aserver outside of the internal network such as the Internet, quantitiesof specific items sold by the vending machine that are required to fillthe vending machine. In this manner, an operator that maintains thevending machine can check the web site before going to the location ofthe vending machine and know exactly how many items are required to fillthe vending machine before going to the location to refill the vendingmachine.

In another embodiment, the teachings of the present disclosure may beapplied to a medical device, for example, a medical monitoring deviceconfigured to be worn on a patient. In this embodiment, the medicalmonitoring device will include at least a communication device ornetwork interface as described above and monitor a certain parameterrelating to a patient, e.g., a heartbeat. In one embodiment, the atleast a communication device or network interface operates on a wirelessconnection and coupled the medical monitoring device to internal network(e.g., a home network) which may be further coupled to the Internet viaa firewall, e.g., a router provided by the Internet Service Provider. Atpredetermined intervals, the medical monitoring device will communicateto and post the monitored data on a remote website. A user such as adoctor may then view the data of the patient by accessing the web siteand not directly connecting to the medical monitoring device.

Other embodiments may include security systems such as fire alarmsystems, security alarm systems, etc., which need to report data. Alsoenvisioned are manufacturing sensing equipment, traffic sensingequipment, scientific instrumentation or other types of reportinginstrumentation.

Based on the sensitivity of the data being communicated and postedthrough the firewall to various external networks, various data securitytechniques are employed by the IEDs (e.g., meters, vending machines,medical monitoring device, etc.) contemplated by the present disclosure,some of which are described below.

The original FTP specification is an inherently insecure method oftransferring files because there is no method specified for transferringdata in an encrypted fashion. This means that under most networkconfigurations, user names, passwords, FTP commands and transferredfiles can be “sniffed” or viewed by anyone on the same network using apacket sniffer. This is a problem common to many Internet protocolspecifications written prior to the creation of SSL such as HTTP, SMTPand Telnet. The common solution to this problem is to use simplepassword protection or simple encryption schemes, or more sophisticatedapproaches using either SFTP (Secure Shell (SSH) File TransferProtocol), or FTPS (FTP over SSL), which adds SSL or TLS (TransportLayer Security) encryption to FTP as specified in RFC 4217. Theinventors have contemplated the use of each of these schemes in the IEDsdescribed above.

In one embodiment, the FTP server 131 in the IED 110 shown in FIG. 3uses a set of username and passwords which are programmed throughModbus. These username and passwords can only be programmed when a userperforms a logon with administrative rights. Each programmed useraccount can be given differing permissions, which grant or restrictaccess to different roles within the file system. Each role controlsread and write access to specific files and directories within the filesystem through FTP. These roles can be combined to customize the accessa specific user is given. When passwords are disabled by the user, adefault user account is used, with full permissions, and a username andpassword of “anonymous”.

Password protection schemes are measured in terms of their passwordstrength which may be defined as the amount of resiliency a passwordprovides against password attacks. Password strength can be measured inbits of entropy. Password strength is an important component of anoverall security posture, but as with any component of security, it isnot sufficient in itself. Strong passwords can still be exploited byinsider attacks, phishing, keystroke login, social engineering, dumpsterdiving, or systems with vulnerabilities that allow attackers in withoutpasswords. To overcome these drawbacks it is contemplated to use someform of password encryption scheme (e.g., 8-bit, 10-bit, 16-bit) inconcert with the password protection system to facilitate securecommunication between an external device, such as PC client 102 and theFTP server 131. However, there are drawbacks associated even with theseschemes. For example, a username and password may be encoded as asequence of base-64 characters. For example, the user name Aladdin andpassword open sesame would be combined as Aladdin:open sesame which isequivalent to QWxhZGRpbjpvcGVuIHNIc2FtZQ== when encoded in base-64.Little effort is required to translate the encoded string back into theuser name and password, and many popular security tools will decode thestrings “on the fly”, so an encrypted connection should always be usedto prevent interception.

In another embodiment, an encrypted connection scheme is used. Inparticular, the FTP server 131 in the IED 110 uses some form of FTPsecurity encryption, such as, for example, FTPS (FTP over SSL), SecureFTP (sometimes referred to as FTP over SSH, i.e., FTP over Secure Shellencryption (SSH)), Simple File Transfer Protocol (SFTP), or SSH filetransfer protocol (SFTP). These FTP security encryption protocolsprovide a level of security unattainable with the previously describedpassword encryption schemes.

FTP over SSH refers to the practice of tunneling a normal FTP sessionover an SSH connection. Because FTP uses multiple TCP connections, it isparticularly difficult to tunnel over SSH. With many SSH clients,attempting to set up a tunnel for the control channel (the initialclient-to-server connection on port 21) will protect only that channel;when data is transferred, the FTP software at either end will set up newTCP connections (data channels) which will bypass the SSH connection,and thus have no confidentiality, integrity protection, etc. If the FTPclient, e.g., PC client 102, is configured to use passive mode and toconnect to a SOCKS server interface that many SSH clients can presentfor tunneling, it is possible to run all the FTP channels over the SSHconnection. Otherwise, it is necessary for the SSH client software tohave specific knowledge of the FTP protocol, and monitor and rewrite FTPcontrol channel messages and autonomously open new forwardings for FTPdata channels.

In further embodiments, the networks may be configured to adhere tovarious cyber security standards to minimize the number of successfulcyber security attacks. The cyber security standards apply to devices,IEDs, computers and computer networks. The objective of cyber securitystandards includes protection of information and property from theft,corruption, or natural disaster, while allowing the information andproperty to remain accessible and productive to its intended users. Theterm cyber security standards means the collective processes andmechanisms by which sensitive and valuable information and services areprotected from publication, tampering or collapse by unauthorizedactivities or untrustworthy individuals and unplanned eventsrespectively. In the various embodiments and implementations of thepresent disclosure, the systems, devices and methods may be configuredto be in accordance with, for example, the Standard of Good Practice(SoGP) as defined by the Information Security Forum, CriticalInfrastructure Protection (CIP) standards as defined by the NorthAmerican Electric Reliability Corporation (NERC), and the ISA-99standard as defined by the International Society for Automation (ISA),the contents of each being incorporated by reference herein. It is to beappreciated that this lists of cyber security standards is merely anexemplary list and is not meant to be exhaustive.

It is to be appreciated that the above-described devices and systems maybe employed to implement the various devices, systems and methodsdescribed below.

An increasing emphasis on security in corporate networks has madeaccessing networked devices, such as meters, for the purposes ofconfiguration and data retrieval, difficult. While networks may beconfigured to permit these services on individual devices, this is atime consuming process when there are many devices. Additionally,security exceptions are often discouraged or prohibited, as they bypassthe networks security policy.

Another problem encountered in networks, especially when traversingpublic networks such as the Internet, is that data can be interceptedand changed by malicious hosts. While it may be desirous for benignhosts, such as firewalls, to access this data, malicious hosts should beprevented. Additionally, malicious hosts can emulate data servers andmeters, causing traffic to go to unintended destinations, or changingthe data before it gets to the server.

Another problem encountered with a multitude of networked devices is thevolume of data transferred to servers. While network speeds haveincreased, the number of devices transferring data, and the amount ofdata they transferred, have increased as well.

One solution to restricted security in networks is for networkeddevices, such as meters or IEDs, to push their data out from the securednetwork. An exemplary system is described above in relation to FIG. 6 ,where IEDs, or meters, 410, 412, 414 push data out of a secure network416 to a server 424. In such a system, clients, e.g., clients 428, wouldnot have to query networked devices to access their information,reducing the need for special configurations on the part of the securednetwork. It is to be appreciated that the description below also appliesto the system described in FIGS. 8 and 9 .

In one embodiment, an exemplary push system may include, but not belimited to, Application Programming Interface (API) methods (e.g.,executed on an IED, such as any of the IEDs described above, or on aserver, e.g., such as server 530, which aggregates data from each IED)to push data points up to the server (e.g., server 424, 524, etc.),query data points from the server (e.g., server 424, 524, etc.), querythe list of data points on the server (e.g., server 424, 524, etc.),query information about the data points on the server (e.g., server 424,524, etc.), register new data points on the server (e.g., server 424,524, etc.), register new meters on the server (e.g., server 424, 524,etc.), remove data points from the server (e.g., server 424, 524, etc.),remove meters from the server (e.g., server 424, 524, etc.), configuresettings of meters on the server (e.g., server 424, 524, etc.), querysettings of meters on the server (e.g., server 424, 524, etc.), enableor disable access to meters and their data by users, add and removeusers from the server (e.g., server 424, 524, etc.), login and logout asa user, create/configure/remove customers from the server (e.g., server424, 524, etc.), and view the security and action audit log for theserver (e.g., server 424, 524, etc.). These exemplary systems may employHTTP, simple Uniform Resource Locator (URL) based API, RepresentationalState Transfer (REST), JavaScript Object Notation (JSON), Simple ObjectAccess Protocol (SOAP), XML body, etc., where the use of same isdescribed in commonly owned pending U.S. application Ser. No.14/742,302, the contents of which are hereby incorporated by reference.

As described above, JSON files may be employed for the communicationbetween IEDs, e.g., IED 410, 412, 414, and servers, e.g., servers 424,524. In one embodiment, the overhead size of JSON files and JSON bodiessent by IEDs and/or servers across networks 422, 522, 622, describedabove, may be improved by reducing the size of the data transferred byencoding the data in two separate fields, one of which contains the listof all values, the other of which describes each of the values. Oneexample may be to represent a set of historical data, wherein the headercontains the JSON array [“timestamp”,“voltage”], which describes theformat of the body, and the body contains the JSON array[[1509451200000,120.1], [1509452100000,120.2]], which contains theactual values. Another example may be to represent a sequence of limitevents, wherein the header contains the JSON array [“index”, “channel”,“type”, “duration”, “excursion_value”], and the body contains the JSONarray [[1,“voltage an”,“above”,24.3,153.3],[2,“voltage cn”,“below”,12.7,67.4]]. It should be appreciated that such an array may represent othercombinations of values as well, such as more channels in the historicalarray, or other logs.

Such an arrangement may be further improved by allowing the order of thecolumns to be determined by the header, such that a consumer of the datarelied on the header's order, rather than being hard coded. One examplemay be to represent the columns as [“voltage”, “timestamp”].

Such an arrangement may be further improved by representing the fieldsin the header section with JSON objects, rather than strings. This wouldallow more information to be encoded about the column's values. Oneexample may be that, instead of a header value of “voltage”, it may be{“name”: “voltage an”, “type”: “voltage”}, which would inform theconsumer to process the values in that column of the array as voltage.Another example may be to include information about where the value camefrom, such as {“name”: “voltage an”, “meter”: “0012345678”}.

Such an arrangement may be further improved by including analysisinformation in the JSON object in the header. One example may be toinclude a max and min value for the column, such as {“name”: “voltagean”, “max”: 127.3, “min”: 119.5, “avg”: 122.7}. Another example may beto include a first and last value for the column, such as {“name”:“timestamp”, “time.first”: 1509451200000, “time.last”: 1509452100000}.

It should be appreciated that other data formats may be used with suchan approach, such as SOAP, or XML.

In one embodiment, data access by malicious hosts may be preventedencapsulating the traffic to and from the meter, e.g., IEDs 410, 412,414, in a secure tunnel protocol, such as TLS, or SSL. One example maybe to use HTTPS instead of HTTP, where HTTPS is a protocol that wrapsHTTP within a connection encrypted with TLS. Another example may be touse secure versions of FTP, such as FTPS, FTP over SSL, or SFTP, whichwrap the FTP protocol within a SSL tunnel. Another example may be to useSecure Copy Protocol (SCP), a protocol for copying files over an SSHconnection, which is a secure connection between two network devices.

Another implementation to prevent data access by malicious hosts may beto encrypt the data being transferred. One example may be to encrypt thebody with an encryption algorithm, such as AES-128.

In another embodiment to prevent data access by malicious hosts, asecure end to end connection between the meter, e.g., IED 410, 412, 414,etc., and the server 424 may be established, such as a VPN (VirtualPrivate Network) tunnel. Such a VPN tunnel may be initiated by themeter, e.g., IED 410, when the meter needs to communicate to the server424. It is envisioned that once the VPN connection is established, anyprotocol may be used by the IED, e.g., 410, to communicate to theserver, e.g., 424.

One solution to malicious hosts emulating meters may be to give meters aunique key, which a processor or communication module of the meter maypresent along with the push data to the server. Such a key is oftencalled an API Key. For example, each meter may get a unique key (storedin a memory of the meter), which uniquely identifies that meter to theserver. As another example, each meter for a specific location may begiven the same key (stored in a memory of each meter), which would tiethose meters to that location.

In another embodiment, an embedded username/password may be included insingle push request from the meter to the server.

One solution to the problem of data transfer is to have multiple levelsof data that can be transferred or uploaded to the server. Such levelsmay have successively increasing quantity of data, to refine the datathey cover, expand the data they cover.

One implementation of levels may be for log data to be uploaded by eachIED 410, 412, 414 to the server 424, to cover only a specific range ofhistorical data, here called Blocks. One example may be for historicalchannel data, such as Voltage A-N data stored every 15 minutes, to beuploaded by a processor or communication module IED to the server, wheresuch data is data stored in the month of May. In another example, forlimits events data the processor or communication module of the IED toonly upload the data for the events which occurred on a specific day. Itshould be appreciated that any set of data indexed by time may be brokeninto such blocks by the processor or communication module of the IED. Itis envisioned that such blocks may then be uploaded by the processor orcommunication module of the IED successively, covering a larger range ofdata.

Another implementation of blocks may include where the processor orcommunication module of the IED breaks up the data to be uploaded onother parameters. For example, historical channel data may be broken upby channels, such as Voltage A-N, Current A, and Watts Received. Asanother example, Power Quality events may be broken up by the processoror communication module of the IED by event type, such as Surges andSags. It is envisioned that any such common parameter within the set ofdata may be used the processor or communication module of the IED forseparating blocks.

Another implementation of blocks may where the processor orcommunication module of the IED breaks up the data to be uploaded intoonly the most recent data. For example, if the last upload of historicalchannel data was a week ago, then a block containing only the last weekof data may be generated and uploaded to the server 424 by the processoror communication module of the IED, e.g., IEDs 410, 412, 414. Onlyuploading the most recent data may be improved by the server 424providing a method for the processor or communication module of the IEDto query what data the server 424 already has, such that the processoror communication module of the IED would not have to keep track of whatdata has already been uploaded to the server 424. One example may be forthe server 424 to provide a web service, that when queried, returned thelast time the meter uploaded data. Another example may be for the server424 to provide a web service, that when queried, returns the newest dateof data the server 424 stored for that meter. Such examples may befurther improved by the web service only returning information for thespecific set of data it requested, such as, but not limited to,historical channel data, power quality events, limits events, orspecific channels, such as, but not limited to, Voltage A-N, Current A,or Watts Received.

Another implementation of uploading levels of data may be the processoror communication module of each IED to upload each data point to theserver 424 as it occurs or is stored, here called Streaming. One examplemay be for the processor or communication module of the IED (e.g.,processors 50, 60, 70 and communication device 24 as shown in FIG. 1 )to upload a limit event (e.g., a voltage exceeding a predeterminedthreshold) when the limit event begins or ends, rather than waiting forsome scheduled upload time. Another example may be for the processor orcommunication module of the IED to upload each 15 minute historicalchannel data point, as the IED stores that log value. It is envisionedthat such streaming of recorded points may be applied to any data point.

Such streaming may be improved by configuring the processor orcommunication module of the IED uploading data points to the server,e.g., server 424 or server 426, which are not directly stored, herecalled Live Streaming. One example may be for the processor orcommunication module of the IED (e.g., processors 50, 60, 70 andcommunication device 24 as shown in FIG. 1 ) to stream the currentVoltage A-N value to the server every second, without relying on theVoltage A-N data point being stored in a log. Another example may be forthe processor or communication module of the IED to upload its currentoperational status, such as uptime, security status, and internal healthchecks, to the server every minute, such that the server can keep trackof the health of the IED. It is envisioned that any value the IEDmonitors may be live streamed in such a fashion. It is to be appreciatedthat the live streaming data may be streamed to server 424 which thenprovides the data to UI server 426 for display, or alternatively, thelive streaming data may be steamed directly to the UI server 426 fordisplay since such data may not be stored.

In a further embodiment, the problem of data transfer may be alleviatedby allowing the data points that are uploaded to the server by theprocessor or communication module of the IED to be configurable, suchthat the user may refine the upload to only the information that theyare directly interested in. One example may be a user interested in thecurrent meter conditions, that configures the meter to only upload LiveStreaming Voltage and Current data points. Another example may be a userinterested in billing, that configures the meter to only upload LiveStreaming Energy data points every 15 minutes. Another example may be auser interested in live power quality events, that configures the meterto upload Streaming Power Quality and Waveform events, and uploadhistorical blocks on a schedule, of power quality related data points,such as voltage, current, frequency, and harmonics. Another example maybe a user interested in everything, that configures the meter to uploadhistorical blocks of all data points on a schedule.

Configurable uploads may be improved by providing each meter or IED witha default configuration template that the processor or communicationmodule of the IED automatically uses, and that the user can use as abase for modification. It is envisioned that such a default template mayprovide a balance between common usage scenarios and restricting thequantity of uploads to the server.

In certain embodiments, such templates may provide the user with a listof such templates, tailored for various usage scenarios the user mightuse the meter in. One example of such a template may be one that focuseson the current meter conditions, that configures the processor orcommunication module of the IED to only upload Live Streaming Voltageand Current data points. Another example of such a template may be onethat focuses on billing, that configures the processor or communicationmodule of the IED to only upload Live Streaming Energy data points every15 minutes. Another example of such a template may be one that focuseson power quality events, that configures the processor or communicationmodule of the IED to upload Streaming Power Quality and Waveform events,and upload historical blocks on a schedule, of power quality relateddata points, such as voltage, current, frequency, and harmonics. Anotherexample of such a template may be one that balances everything, thatconfigures the processor or communication module of the IED to uploadhistorical blocks of all data points on a schedule.

In one embodiment, configurable uploads may enable arbitrary channels,e.g., voltage channels, current channels, etc., to be included as a datapoint in the upload. Such arbitrary data points would be known to theIED, but need not be known to the server ahead of time. One example maybe where the processor or communication module of the IED (e.g.,processors 50, 60, 70 and communication device 24 as shown in FIG. 1 )adds a new data point when the software is upgraded, where this new datapoint is not known ahead of time to the server. One possibleimplementation of arbitrary channels may be that the channels uploadedto the server are identified by a unique string key, determined by themeter, and associated with a display name, which may or may not beunique.

Network Devices, e.g., IEDs 410, 412, 414, pushing data to the servermay be improved by making the format of the query be the same as theformat of the push, here called Symmetric Formats. One example of such aformat may be to use an array of data values, representing multiple datavalues over time. In such a format, the information to determinepresentation as well as parsing would be included, such as, but notlimited to, the display name, the channel key, the channel type, and thedata type.

Symmetric Formats may be improved by allowing clients to query data frommeters or IEDs using the same format as the push. One example may be aclient that queries the Power Quality logs from the meter using an HTTPGET request, and the processor or communication module of the IEDreturns the values in the same format as the IED would push to theserver. Another example may be an intermediate server, e.g., server 530,which collects the data from all the meters, e.g., IEDs 510, 512, 514,on its network, e.g., network 516, and forwards the data directly toanother server, e.g., server 524, as shown in FIG. 8 . In such anexample, the intermediate server would have to do minimal work toarrange the data to be pushed up to the server.

With an increasing number of networked devices, e.g., IEDs, meters,etc., being commissioned and deployed within users' networks, addingconfigurable options increases the burden on the configuring user, aswell as increasing the likelihood of configuration error. While asoftware may be created that configures common parameters of multipledevices simultaneously, such interfaces can be cumbersome and errorprone, as they often must deal with various special cases. Additionally,such interfaces must know about the devices beforehand, which is aconfiguration task in and of itself.

One solution to the onus of configuration is for meters to automaticallyregister themselves with the Meter Data Cloud server, e.g., servers 424,426, 524. For example, referring to FIG. 10 an automatic registrationsystem 700 is shown in accordance with an embodiment of the presentdisclosure. The system of FIG. 10 includes a Meter Data Cloud Server,which may represent any of servers 424, 524, 530, 630, etc., forcommunicating with and receiving data from a plurality of devices 702e.g., IEDs 410, 412, 414, 410, 512, 514, 610, 612, 614. In oneimplementation, when meter or IED 702 is first installed in the user'snetwork, the meter 702 attempts to register itself with the Meter DataCloud server 424/524, by sending a registration request 704. Such arequest may contain the meter's identification information, including,but not limited to, a unique identifier, the type of device, and thelist of data points that the meter supports. It is to be appreciatedthat the registration request 704 may be sent to the Meter Data Cloud424/524 based on a known address (e.g., IP address, URL, etc.) of theMeter Data Cloud 424/524. For example, the address of the Meter DataCloud 424/524 may be preprogrammed in the meter 702 at the time ofmanufacture so as soon as the meter 702 is placed into service, aregistration request is generated and sent.

In another implementation of automatic registration, after the metersettings are first configured by the user, the meter 702 mayautomatically attempt to register itself with the Meter Data Cloudserver 424/524, by sending a registration request 704. The address ofthe Meter Data Cloud 424/524 may be entered into the meter 702 by theuser after the meter 702 is placed into service, e.g., via an inputmeans on the meter 702, for example, a touchscreen, buttons, etc., orvia a software program executing on a computing device coupled to themeter 702. In such an implementation, the user may configure the meter702 with location specific information before registering, such as, butnot limited to, physical location, cloud server location, and cloudserver access keys.

In another implementation of automatic registration, a processor orcommunication module of the meter 702 may implement a command in acommunication protocol to trigger an attempt to register itself with theMeter Data Cloud server 424/524, by sending a registration request 704.In such an implementation, a meter 702 may be ensured to be configuredcorrectly before being triggered to register itself with the server. Itis envisioned that any protocol may be used for such a command,including, but not limited to, Modbus, HTTP, DNP, or custom protocolsover TCP or UDP.

Such a command trigger may be improved by using a command protocol whichsupports targeting multiple devices on a network simultaneously, oftencalled broadcasting. In such an implementation, each device whichreceived the command would attempt to register itself with the MeterData Cloud server 424/524. One example may be to use UDP broadcasts oranycasts, which is a form of UDP which any device on the local networkcan receive. Another example may be to use UPnP broadcasts to anynetwork device which registers to listen to such a command. It isenvisioned that other such broadcast protocols may be used.

Another solution to the onus of configuration is for meters 702 toautomatically upload their data points to the Meter Data Cloud server424/524. In one implementation, the meter 702 may begin uploading datapoints automatically after first registering with the cloud server. Inanother implementation, the meter 702 may begin uploading data pointsautomatically after the cloud configuration changes. In anotherimplementation, the meter 702 may begin uploading data pointsautomatically after receiving a command in a communications protocol.

Another solution to the onus of configuration is for the Meter DataCloud server 424/524 to give the user the ability to enable or disableaccess to the data of each meter 702. In such an implementation, whenaccess to the data of a meter 702 is disabled, the data nor the meter702 is not actually removed from the server 424/524, but instead onlythe ability of the user to access that data is disabled. Additionally,in this implementation, the meter 702 would still have the ability toupload data to the server 424/524, even though access to that data isdisabled. It is envisioned that such a solution would reduce the needfor meter 702 to be re-configured or re-registered in the event thatthey are re-enabled. It is also envisioned that in such a solution, auser may still explicitly delete the meter 702 from the cloud server424/524 if they wished.

In one implementation of disabling access to meter 702 data, the MeterData Cloud server 424/524 may block access to the data query commandsfrom a user or client, based on information stored about that meter 702.One example may be for the Meter Data Cloud server 424/524 to store anenabled setting for each meter 702, and when the historical channel datais queried, such as with a HTTP REST request, the server 424/524 mayreturn an error message, such as “Disabled” (e.g., to a UI displayed ona client device or to any other device), for meters 702 that have beendisabled. Another example may be for the Meter Data Cloud server 424/524to return an error message for all requests related to a meter 702 thathas been disabled, such as, but not limited to, data queries, meter 702information, meter 702 lists, or meter 702 settings.

In another implementation of disabling access to meter 702 data, themeter 702 may be removed from a list of active meters 706 stored inserver 424/524. In such a system, only meters 702 in the active list 706would be accessible by non-administrative users. One example may be asystem where a customer has 3 meters 702 in a location, one of whichthey want to disable. In such an example, the disabled meter 702 wouldbe removed from the list of meters 706, and would no longer beaccessible by the user.

Such an embodiment of disabling meters 702 may be improved by onlycharging users for the meters 702 that are enabled. One example may be acustomer with 100 meters 702, of which only 50 meters 702 are enabled.In such an example, the customer would only be charged for the 50enabled meters 702, and not for the other 50 disabled meters 702.Additionally, in such an example, it is envisioned that the user wouldnot have access to the disabled meters 702, except to re-enable them(e.g., by sending a request to the server 424/524 to activate the meterand update list 706), at which time they would again have to pay forsuch re-enabled meters 702.

Additionally, an embodiment of disabling meters 702 may be improved byusing server 424/524 to automatically disable meters 702 for users whichhave not paid for access to those meters 702. One example may be a userthat has 100 enabled meters 702, and during automatic subscriptionrenewal, if the credit card on file is rejected, all the meters 702 aredisabled by server 424/524 until the payment is amended. Another examplemay be a user that cancels automatic subscription renewal, at which timeall of their meters 702 are disabled until subscription is renewed.Another example may be a user which never entered billing informationand has no access to meter data. In such an example, data for meters 702may be collected, but the user would only have access to that data oncethey enter billing information.

A payment system for implementing the embodiment described above inshown in FIG. 11 in accordance with the present disclosure. Such apayment system may be improved by using a credit system 708 stored inserver 424/524 to charge users for each meter 702, and the amount oftime those meters 702 are enabled. The credit system 708 may be incommunication via a network, e.g., 422/522, with one or more financialtransaction systems including various money transfer systems 712, 714,716. In such a system 708, a charge credit is used by each meter duringa fixed period of time, and if no credits are available, then that meteris disabled by server 424/524 (e.g., by sending a signal to the meter702 causing the meter to turn off or shut down until directedotherwise). One example may be a user that has 100 meters 702 and eachcredit is worth one month of access. In such an example, 100 creditswould be required at the beginning of each month, and 1200 credits wouldbe required for an entire year. Another example may be a user that has100 meters 702, but only has 350 credits available. In such an example,at the beginning of the first three months, 100 credits would be removedfrom the credits available, but at the beginning of the forth month,since only 50 credits are available, access to the meters 702 would bedisabled by server 424/524. Another example may be a user that has 100meters 702 enabled, and 100 meters 702 enabled, 200 credits, anddisables 50 meters 702 in the second month. In such a system, 100credits would be used for the first month, but only 50 used for thesecond and third month.

Such a credit system may be improved by configuring server 424/524 toautomatically charge the users billing information on a schedule,refilling the credits they have available to use for meters 702. Such anautomatic renewal system is often called a subscription. One example maybe the user subscription implemented by server 424/524 automaticallycharges the user at the beginning of each month, adding enough creditsto allow access to all enabled meters 702 for that month. Anotherexample may be the user subscription implemented by server 424/524automatically charges the user when their available credits areinsufficient to allow access to all meters 702 for the next month.Another example may be the user subscription implemented by server424/524 automatically charges the user at the beginning of each year,adding enough credits to allow access to all enabled meters 702 for theentire year.

Such a credit system may be improved by configuring server 424/524 toautomatically charge the user for sufficient credits to allow access tometers 702 which were just enabled. One example may be a user which has50 meters 702 enabled, and which registers and enables via server424/524 another 50 meters 702, at which time the additional creditsrequired for the 50 meters is automatically charged by server 424/524 tothe users billing information (e.g., by interfacing with system 710).

Such a credit system 708 may be improved by providing credits to a userin ways other than a billing charge, such as an administrative action,or a special code entered by the user. One example may be a user whichis encouraged to adopt using credit system 708 of the Meter Data Cloudsystem 424/524 by providing them with 100 free credits to start playingwith the system 708, enabled by an internal administrative interface.Another example may be a promotion which provides users with a code forfree credits, which they enter into their account through the billinginterface, and which adds credits to their credit pool.

One problem created by allowing meters 702 to self-register is thatwithout a user entering the registration information, the server 424/524cannot verify that the meter 702 being registered is valid. Oneembodiment of registration verification is to keep a list of all validdevices 702 in the Meter Data Cloud 424/524. The list of valid devicesmay be stored along with the list of active devices in list 706 (i.e., adatabase). Such a list 706 may be used to verify each meter 702 as itattempts to be registered, and if a meter 702 is not valid, theregistration is rejected. One example may be when a valid meter 702attempts to register with the Cloud Server 424/524 (i.e., a processor orcommunication module sends a registration request 704 to server424/524), the server 424/524 checks the serial number of the meter 702against the list of valid devices 706, and finding the meter 702 to bevalid, allows the meter 702 to continue registration. Another examplemay be when an invalid meter, such as malicious host, attempts toregister with the Meter Data Cloud server 424/524, the server 424/524checks the serial number of the meter 702 against the list of validdevices 706, and not finding the meter 702 to be valid, rejects themeter 702 from continuing registration. Another example may be a validmeter 702 which has already been registered, and is now attempting to beregistered again with the Meter Data Cloud server 424/524, which theserver 424/524 checks the serial number against the list of validdevices 706, and finding the meter 702 to have already been registered,rejects the meter 702 from continuing registration.

One implementation creating such a list of valid devices 706 may be thateach meter is added to the list 706 by an administrative process duringproduction. One example may be a web service 718 that is called by theautomatic internal manufacturing production processes when the meter 702is constructed, and when called, the Meter Data Cloud server 424/524adds that meter 702 to the list of valid devices 706. Another examplemay be a web service 718 that is called in response to a manual actionby a user in production, such as signing off on the shipment of themeter 702 to a customer. Another example may be an administrativeinterface 720, such as a web page, on the Cloud Server 424/524, that auser from production may manually enter meters 702 to add to the list ofvalid devices 706.

Such a creation of a list of valid devices 706 may be improved byconfiguring server 424/524 such that one or more meters 702 may be addedwith any such interface 720, and that a batch of meters 702 may be addedat the same time. One example may be that production generates a list ofmeters 702 to add to the valid list 706 during production, and that sucha list 706 is automatically added at the end of each month. Anotherexample may be that a query may be provided (e.g., via server 424/524)to the production databases that lists all meters 702 produced during atime period, and the results of such a query can be uploaded to theMeter Data Cloud server 424/524.

Such a list of valid devices 706 may be improved by associating thecustomer that purchased the device with the device in the valid list706. This association may be stored in database having a list of validcustomers 722 within server 424/524. In such a system, a meter 702 mayonly be associated with a customer if the user is the customer thatpurchased the meter 702. One example may be a meter 702 purchased bycustomer ABC, then registered and associated with customer ABC by MeterData Cloud server in list 722. In such a system, since the meter 702 hascustomer ABC listed as the owner of that meter 702, the Meter Data Cloudserver 424/524 associates the meter 702 with that customer. Anotherexample may be a meter 702 purchased by customer ABC, then registeredand attempted to be associated with customer DEF in the Meter Data Cloudserver 424/524. In such a system, since the meter 702 has customer ABClisted as the owner of that meter 702, but the user is attempting toassociate the meter 702 with customer DEF, the Cloud Server 424/524prevents the meter 702 from being associated with customer DEF. Sinceownership of meters 702 can change hands, it is envisioned that thecustomer associated with a meter 702 in the list of valid devices 706may be changed by an administrator.

Another solution to the onus of configuration is for an intermediatesoftware stored in an intermediary server 724, which has awareness ofall the meters 702 within a network, to perform the registration ofthose meters 702. The intermediary server 724 is in communication withserver 424/524. An exemplary system employing such software is shown inFIG. 8 . In one embodiment, a meter fleet management software isemployed, e.g., on server 530, which discovers and maintains a list ofmeters 702, e.g., IEDs 510, 512, 514, in a network, e.g., network 516,and that registers those meters 702 for the user. One example ofregistration may be that once the user enters login information for theMeter Data Cloud server 424/524, the management software may take thelist of all known meters 702, e.g., in network 516, and register themwith the Cloud Server 424/524. Another example may be when a new device702 is added or detected by the management software, that device isautomatically registered with the Cloud Server 424/524. Another examplemay be a button or action presented to the user in the UI of themanagement software, that when performed (e.g., by engaging the buttonor selection the action), registers one or more selected known devices702 with the Meter Data Cloud server 424/524.

It is envisioned that such a management software may be installed on auser's server, e.g., server 530 shown in FIG. 8 , to manage the fleet ofmeters on their network, e.g., network 516, or on a prebuilt deviceprovided to the user, and plugged into their network. Such a standalonemanagement device may have the same capabilities as the installedmanagement software. It is also envisioned that such a management devicemay be simplified by only providing meter detection and registrationfunctionality.

Another solution to the onus of configuration is for the meter 702 to beregistered in production, before it is shipped to the customer. In sucha system, this registration would configure the meter 702 with enoughinformation that it may (e.g., via a processor and/or communicationmodule) automatically start uploading data to the Meter Data Cloudserver 424/524 from the moment it is installed, such as, but not limitedto, the address of the Meter Data Cloud server 424/524, a uniqueidentifier for the meter 702 with the Meter Data Cloud server 424/524,or the ApiKey for the meter 702 to use when uploading data to the MeterData Cloud server 424/524.

One improvement to the production registration of meters 702 would be toprovide a unique key, generated by the Meter Data Cloud server 424/524during registration, to the customer that purchased the meter 702. Sucha key may then be used by the customer to add the meter 702 to the listof meters they own in the Meter Data Cloud server 424/524, from theirmanagement interface in the Cloud Server 424/524. In such a system, thiswould allow the meter 702 to be registered, managed, and begin uploadingdata to the server 424/524, without any user intervention. Additionally,in such a system, it is envisioned that this would prevent users fromclaiming ownership and access to meters 702 and their data, to whichthey did not purchase and do not have legitimate access.

One method of distributing such a unique key may be by programming itinto the meter 702. In such a system, the user may then query the uniquekey from the meter 702 using a software, such as a webpage on the meter702, and then enter it into the Meter Data Cloud server 424/524.

Another method of distributing such a unique key may be by providing theunique key with the documentation included with the meter 702 duringshipping. One example may be to print the unique key on the physicalside of the meter 702. Another example may be to include a registrationcard with the meter 702, such as inside or on the side of the box themeter 702 ships to the customer in.

Another solution to the onus of configuration is for a processor orcommunication module in each meter 702 to use a single, known, MeterData Cloud server 424/524 address for registration and uploading data toserver 424/524. Such a known server address would remove a parameterthat the user would need to configure in the meter 702 for it tointegrate with the Meter Data Cloud server 424/524. One implementationof a known server address may be to hardcode a single address into amemory, processor, communication module, etc., of each of the meters702, e.g., memories 18, 20, processors 50, 60, 70, FPGA 80 and/orcommunication device 24 of IED 10 shown in FIG. 1 . One example may beto use the address http://meterlogclouddata.com for all meters 702. Itshould be appreciated that any such http address may be used in thisimplementation.

A single known address may be improved by changing the known addressprogrammed in new meters 702 over time, while still supporting the oldaddresses hardcoded in old meters 702. One implementation of changingaddresses may be to configure multiple addresses with global DNSservices to route to a single Meter Data Cloud server 424/524. Oneexample may be a different address for each year, such ashttp://examplecloud-2017.com, http://examplecloud-2018.com, andhttp://examplecloud-2019.com.

Another implementation of changing addresses may be to use multiplesub-domains under a single domain address. One example may be to use adifferent sub-domain for each customer, such ashttp://0001.examplecloud.com, http://4971.examplecloud.com, andhttp://0758.examplecloud.com, where 0001, 4971, and 0758 are samplecustomer codes. Another example may be to use different sub-domains foreach meter type. Another example may be to use different sub-domains foreach meter 702, such as http://0001.examplecloud.com,http://4971.examplecloud.com, and http://0758.examplecloud.com, where0001, 4971, and 0758 are sample meter ids.

Another implementation of known server addresses may be to configure theknown address when the meter 702 is registered.

As the need for a distributed network of data collecting devices, e.g.,any of the IEDs described above, spreads, the technologies in thosedevices do not always keep up to pace. Many may be old and lacking thetechnology to interconnect on such a network; others may be small, lowpower devices, that haven't been given the ability to do so.

Additionally, with a plethora of meters, even when every device has theability to push data points up to the Meter Data Cloud server 424/524itself, network security may not allow the egress of data from so manyindividual devices. Adding to the complexity is the difficulty for usersto find which meters have trouble pushing data on the network, withoutlaboriously interrogating each device.

One solution to the plethora of underpowered devices is to use a singledevice on the same network, that can act as an intermediary between theunderpowered devices, and the Meter Data Cloud server 424/524. Such anarrangement is often called fog and/or mist computing. An exemplarysystem is shown and described in FIG. 8 .

In one embodiment, the intermediary device 530 may be a server whichretrieves data point logs from meters (e.g., 510, 512, 514) which do nothave the ability to push their own data points to the Meter Data Cloudserver 424/524. Such an intermediary device or server 520 would thensubsequently push the data point logs up to the Meter Data Cloud server424/524 for the meters, e.g., IED 510, 512, 514. One example may be asoftware installed on a server 530 within the user's network, thatretrieves the data logs for all known devices in the network, using datapull protocols, and pushes that data up to the Meters Data Cloud server424/524 on a schedule. Another example may be a device dedicated tocollecting meter data that may be installed on a user's network. Anotherexample may be a meter itself, which in addition to performing datacollection, may also collect data from other meters on the network. Itshould be appreciated that a user's network may be as small as a privatenetwork with only 10 devices, or as large as publicly accessible meterson the Internet. It should also be appreciated that one or more suchservers may be used, each handling a sub-set of meters.

Such an intermediary server may be improved by automatically discoveringdevices which do not have the ability to push data to the Meter DataCloud server themselves. One example may be for the server to perform aTCP network scan over a known range of IP's, to detect meters whichrespond to a given meter data pull protocol, such as Modbus TCP or DNP.Another example may be for the server to advertise its location bysending a UDP broadcast on the network and listening for registrationresponses from meters. Another example may be for the server to listento meter identity broadcasts, such as using UPnP. It is envisioned thatsuch detected meters would be registered with the intermediary server,and subsequently the intermediary server would pull data points fromthese meters, and push them to the Meter Data Cloud server 424/524. Itis also envisioned that such pull and push of data points may also beused for meters which have push capability.

In a further embodiment, the intermediary device may be a server whichcollects data point logs for meters which do not have such logs, bypolling the meters live data points on a schedule. Such a server, e.g.,server 530 would then subsequently push the collected logs up to theMeter Data Cloud server 424/524 for the meter. One example may be aserver that polls the voltage, current, and power live values from allknown meters every minute, stores those values local to the server, andthen pushes those stored values up to the Meter Data Cloud server once aday. Another example may be a server that polls the energy live valuesfrom a meter every 15 minutes. It is envisioned that any combination ofintervals and data points may be chosen for the collection and push ofstored data.

Another implementation of the intermediary device may be a server whichpolls the meters live data points on a schedule, and immediately pushesthose data points up to the Meter Data Cloud server. It is envisionedthat such a poll and push of data points may be done on a rapid scheduleand would not necessarily be stored by the intermediary server, thoughthis does not preclude the possibility of storing such points. Oneexample may be a server, e.g., server 530, that polls the voltage,current, and power live data values from all known meters every second,and pushes those same data points to the Meter Data Cloud server 424/524every second; when the Meter Data Cloud server receives the updated livedata points, it would replace the last stored live data point,ultimately providing a live updated value to the user. Another examplemay be a server which pulls and pushes energy live data values from themeter every second to the Meter Data Cloud server, which would then addthe energy values to a list of stored historical data points. In such anexample, it is envisioned that the most recent energy data point wouldbe used by the Meter Data Cloud server as the live value for the user.

One solution to the problem of network security may be for theintermediary server, e.g., server 530, to act as a proxy for the meters,accepting the push API requests from the meters, and sending the data upto the Meter Data Cloud server for them. It is envisioned that such aproxy, having fewer egress points from the network, would be easier toconfigure and manage.

In one embodiment, a proxy server may be a server to which all meters onits network send the Meter Data Cloud server API requests, and whichforwards all such requests to the actual Meter Data Cloud server, e.g.,server 424/524. One example may be a log data status query, which theproxy server forwards unmodified to the Meter Data Cloud server, waitsfor the response from the server, then forwards the response to themeter. Another example may be a voltage live data push, which the proxyserver forwards to the Cloud Server, and generates an immediate responseto the meter, to acknowledge its receipt.

Such a proxy server may be improved by caching information from theMeter Data Cloud server, and using that cached data when responding tothe meters, rather than requiring the meter to wait on a response fromthe server. One example may be a log data status query, which the proxyserver caches the status of for the meter, and responds to the meter'srequest immediately, using the cached data, instead of sending anyrequest to the Meter Data Cloud server. Another example may be a metersettings query, which the proxy server caches the settings for thatmeter.

In one embodiment, an exemplary cache may be for the proxy server toread meter pushes, process their contents, and update the local cacheappropriately. It is envisioned that in such a system, the proxy serverwould be the only route that a meter's information would be updated. Oneexample may be a meter pushing log data points to the Meter Data Cloudserver, which the proxy server would read the range of data beingupdated, and update the cache for that data point's log information. Insuch an example, when the meter next requested a log data status queryfor that data point, the proxy server may respond to the meter with thatcached data.

In another embodiment, a cache may be for the proxy server toperiodically query the Meter Data Cloud server for information about themeters it tracks. One example may be for the proxy server to query themeter settings every 10 minutes from the Meter Data Cloud server,updating the cache appropriately. Another example may be when the proxyserver gets a log data status query from a meter, if it has not updatedthe cache for that data within 10 minutes, the proxy server may querythe log data status from the Meter Data Cloud server and update thecache, before responding to the meter. Another example may be after theproxy server forwards a log data point push to the Meter Data Cloudserver, it queries the log data status from the Meter Data Cloud serverto update the local cache.

Such a proxy server may be further improved by automatically replacingor adding parameters to the API requests of the meters being forwardedto Meter Data Cloud server. One example may be the addition ofauthentication information, such as the ApiKey or user securityinformation, which would reduce the need to configure each meter withsuch information. Another example may be replacing the authenticationinformation sent to the proxy server by the meter, with theauthentication information required by the Meter Data Cloud server.Another example may be to replace all the timestamps in the data pointpush request with another format, such as converting an integerrepresentation of milliseconds since 1970 to a string representation oftime. It is envisioned that any such data type conversion may be used toenable meters and Meter Data Cloud servers with differing formats tocommunicate. It is also envisioned that such parameter replacement andadding may be performed on the messages going from the Meter Data Cloudserver to the meter.

Such a proxy server may be further improved by changing the protocolused to push data to the Meter Data Cloud server, or wrapping theprotocol in a tunnel. One example may be to change a REST based JSONdata point push request from the meter, to a SOAP based XML data pointpush request required by the Meter Data Cloud server. Another examplemay be to convert a HTTP push request from the meter, to a HTTPS pushrequest to the Meter Data Cloud server. Another example may be for theproxy server to wrap the outgoing push request inside of a VPN tunnel.It is envisioned that the proxy server would reverse the protocolconversion and tunnel wrapping going from the Meter Data Cloud server tothe meter.

In a further embodiment, a proxy server may be an intermediate server,e.g., server 530, which supports all the same commands as the Meter DataCloud server, and which replicates many of the same internal features asthe Meter Data Cloud server, such as, but not limited to, storing meterdata points, accepting registration of meters, allowing users to log in,and responding to meter data point requests. It is envisioned that, inaddition to forwarding meter data points to the Meter Data Cloud server,such an intermediate server may act as a stand-in server for the MeterData Cloud server, providing local access to many of the same features.For example, such a stand-in server may accept meter data point pushes,store the data points locally, and respond to meter data point queriesfrom the local information, in addition to pushing the stored meter datapoints to the Meter Data Cloud server for the meter.

Such an intermediate or stand-in server may be improved by postprocessing the raw data points pushed by the meter. One example may befor the stand-in server to analyze the voltage data point pushed by themeter every minute, generate a maximum, minimum, and average value for a15 minute period, and push that 15 minute value to the Meter Data Cloudserver, e.g., server 424/524 for the meter. Another example may be ameter that only pushes live data point values every second to thestand-in server, and the stand-in server stores a log data point valuefor each of those points every 15 minutes, which it then pushes to theMeter Data Cloud server. Another example may be for the stand-in serverto take the voltage and current data points pushed by the meter,generate a power data point, and push the generated power data point tothe Meter Data Cloud server. Another example may be for the stand-inserver to combine three system change events, such as time changeevents, which represent a single event in the meter, but which may notbe represented as a single event in the meter's internal format.

In another embodiment, raw data points may be post processed to generatelimit data points off of live data points pushed by the meters. Oneexample may be a meter which pushes voltage live data points everysecond, and when the stand-in server sees a voltage value that exceeds alimit configuration, such as 140 V, the stand-in server would generate alimit data point for this event and push that event to the Meter DataCloud server. It is envisioned that such post processing may occur atsome time after the meter pushed the data points, or while the stand-inserver was processing the posted data points from the meter.

Another way raw data points may be post processed may be for thestand-in server to perform actions based off detecting configuredconditions. One example may be read the meter settings from the meter,after seeing a system change event indicating the meter settings werechanged. Another example may be to send the command to the meter tomanually capture a waveform event, when it sees voltage live data pointvalue go over a configured limit. Another example may be to collectdiagnostic information about the meter, not normally pushed to the MeterData Cloud server, such as firmware, configuration, and internal debuginformation, when a system error data point is detected. Such diagnosticinformation may then be combined with the system error data point, andpushed to the Meter Data Cloud server.

One solution to the problem of finding and configuring meters which havedifficulty pushing to the Meter Data Cloud server, is for those metersto attempt to find intermediate servers that can assist in pushing themeter's data points to the Cloud Server. One implementation ofintermediate server discovery may be for the meter to broadcast aservice discovery request and wait for an intermediate server torespond. One example may be a meter, on discovering that it cannotcontact the Meter Data Cloud server, sends a UPnP service discoveryrequest for any server that can act as a meter data point pushintermediary server, e.g., server 530. It is envisioned that such ameter would continue attempting to contact the Meter Data Cloud server,until it successfully paired with an intermediary server. Anotherexample may be for the meter to send push service request advertisementusing a custom UDP broadcast, which an intermediary server, uponreceipt, would use to begin pairing with the meter. Another example maybe another meter, which already knows the location of the intermediaryserver, or an alternate address for the Meter Data Cloud server thatworks better, may respond to the requesting meter with the intermediaryserver's location, which the requesting meter may then use to registerand pair with the intermediary server. It should be appreciated thatother service advertisement and discovery protocol may also be used.

Another implementation of intermediary server discovery may be for themeter to scan the local network for servers that respond to Meter DataCloud service requests. One example may be to send a cloud serverversion query request to every IP address in the local network, usingthe configured net mask of the meter. Another example may be to pingevery IP address in the local network, and only send version queryrequests to servers which respond to the ping.

Another implementation of intermediary server discovery may be for theserver to advertise that it can act as an intermediary cloud server. Oneexample may be an intermediary server, e.g., server 503 installed on alocal network, e.g., network 516, that broadcasts a UPnP advertisement,and when a new meter is connected to the network, upon determining thatit cannot connect to the Meter Data Cloud server 524, receives theservice advertisement, and registers itself with the intermediaryserver, e.g. server 530. It should be appreciated that other serviceadvertisement protocols may also be used.

Another implementation of intermediary server discovery may be for alocal network's DNS to be configured such that all named host requestsfor the Meter Data Cloud server, instead of going out of the network tothe real Meter Data Cloud server, e.g., server 424/524, are insteaddirected to the internal intermediary server. It is envisioned that insuch a system, the meter would then identify the contacted server as anintermediary server through interrogation. One example may be for theMeter Data Cloud server to be known to be at http://examplecloud.com,and the local network DNS has been configured to send traffic forhttp://examplecloud.com to the local address 192.168.0.15, which iswhere the local intermediary server is installed. Such an intermediaryserver would be configured to contact the correct global Meter DataCloud server.

Intermediary servers may be further improved by connecting to devices,which are not accessible via the local network via out-of-band/localprotocols. Such an intermediary server may then bridge the inaccessibledevice onto the network. One example may be a meter which communicatesvia Bluetooth. Another example may be a meter which communicates viaZigBee, IEEE 802.15 and/or IEEE 802.11 commonly known as WIFI. There aremany more wireless telemetry systems and these and future such wirelesstelemetry systems are contemplated to be within the scope of the presentdisclosure. Another example may be a meter isolated on a serialfiber-optic bridge, set up to restrict access to the device, and isolateit from electrical faults. In another example, another meter may becoupled to an inaccessible device to bridge the device onto the network.

Meter Data—the collection, storage, and viewing of it—is quicklybecoming a major issue in the Power Industry, as more and more devicesare commissioned. Meters have hundreds of channels (e.g., voltagechannels, current channels, etc.), with years of data, and customershave thousands of meters, resulting in trillions of data points.Additionally, as the data for multiple meters at a location are ofteninterconnected, it is important to be able that data in parallel,preventing it from being stored separately.

Not only do users expect to be able to access each of these data pointsfrom anywhere, with increasing emphasis on security in corporatenetworks, many users are losing the ability to install client softwareto perform specialized meter data viewing. Additionally, many networksrestrict the network traffic that is allowed in and out, making itdifficult for data collection software to query meter data from meters.

One solution to the problem of data storage and management may be tostore the meter data points for all meters 702 on a central data server,e.g., server 424/524, accessible from the Internet. In one embodiment,an exemplary central data server 424/524 may be used by meters 702 topost data points, as well as clients (e.g., 428, 528) to request thosesame data points. Additionally, such a central data server 424/524 is beaccessible from the Internet, and includes a web server component, it isenvisioned that clients may view and configure meter data points andinformation from web browsers in communication with the web servercomponent of server 424/524, without installing any dedicated clientapplications. Additionally, such a central data server may be composedof a single server, or a collection of coupled servers, maintenance ofthat server would be simplified.

In one embodiment, a central data server 424/524 may be a singlephysical server machine, which internally stores the multitude of meterdata points on one or more data servers.

In another embodiment, a central data server 424/524 may be a looselycoupled set of servers, each providing one or more component for theoperation of the central data server 424/524, and for which some serversprovide duplicate and redundant functionality for other servers, butwhich in aggregate present as a single server to the public Internet.Such a collection of servers is typically called a Meter Data Cloudserver 424/524. One example of such a Meter Data Cloud server 424/524may be a collection of servers and components that include, but are notlimited to, a Web Server to present web files, a file storage forstorage of data and static web resources, a Web Service provider toaccept meter pushed data points and perform dynamic interactions withclients, a database to store the meter data points uploaded, a usermanager to authorize user credentials during login, and a system loggerto audit user actions and monitor performance. It is envisioned thatsuch internal servers may be any combination of physical servers orvirtual servers, e.g., a single physical host running at least twoservers.

Referring to FIG. 12A, in one embodiment, a Meter Data Cloud Server424/524 may be improved by distributing the functionality of eachcomponent across multiple servers, often called Load Balancing. Oneimplementation of Load Balancing may be to partition data based on somekey, such as meter, data point, or customer, across multiple internalservers. For example, in one embodiment, Meter Data Cloud server 424/524may include a plurality of partitioned servers 808 (e.g., partitions inthe server storage of 424/524). In another embodiment, server 424/524may represent a plurality of discrete servers, where each partitionserver 808 (e.g., Server A, Server B, Server C, Server n) is a separateserver. In either case, pushes or requests from a client, meter, orother device (e.g., shown as request 802) for data based on that keywould be routed to the appropriate server 808 by a primary server 804,called the gateway server, thus reducing the load on all servers 808. Itis to be appreciated that gateway server 804 may be included in server424/525. One example may be to use the customer as a key, where the datafor the meters 702 of each customer is stored on a different internalserver 808, and the gateway server 804 routes the meter data posts andqueries to the appropriate internal server 808. Another example may beto use meter 702 as a key, where the data for meters 702 is distributedacross multiple internal servers 808, for example 100 to a server 808.It should be appreciated that, although multiple internal servers 808provide the functionality of the component, here being data storage, tothe user requesting data, it appears as a single server 424/525.

Referring to FIG. 12B, another implementation of Load Balancing may beto store duplicate copies of data on multiple internal servers 808, andwhere each of the internal servers 808 notifies the others (e.g., ServerA notifies Servers B, C, D, etc.) when they receive an update to theirdata, so that they can all remain in sync. For example, a meter 702 maypost new data to the Voltage AN data point, which gets routed to LoadBalanced Server A. Load Balanced Server A would then notify LoadBalanced Server B and C that new data is now available, such that when auser requests data (e.g., request 802), they would get the same data,regardless of if their request was routed to Load Balanced Server A, B,or C.

Referring to FIG. 12C, another implementation of Load Balancing may beto partition data and services based off of geographical region, suchthat a meter 702 posting data and a user requesting data (e.g., viarequest 802) would be routed to the internal server 808 within server424/525 located closest to the meter posting the data. Such RegionalLoad Balancing may reduce the latency of such requests 802. One examplemay be a North American user, which was routed to an internal server 808within server 424/525 in the United States. Another example may be anAustralian user, which was routed to an internal server 808 withinserver 424/525 in Australia. It is envisioned that such Regional LoadBalancing may also implement other Load Balancing schemes, such as, butnot limited to, partitioning based on a key, or duplication of data.

Referring to FIG. 12D another implementation of Load Balancing may befor the gateway server 804 to route post and query requests 802 to theinternal server 808 within server 424/525 with the least load or usingthe least amount of computing resources. Such Load Balancing is oftencalled Dynamic Load Balancing. One example may be for the gateway server804 to round robin route requests 802 to different internal servers 808.Another example may be for the gateway server 804 to measure averageresponse times from internal servers 808, and always route requests 802to the internal server 808 with the lowest latency. Another example maybe for the gateway server 804 to measure the amount of data going in andout of each internal server 808, and route requests 802 to the internalserver 808 with the lowest total throughput. Another example may foreach internal server 808 to provide performance metrics, such as, butnot limited to, total CPU usage, total memory usage, storage spaceavailable, data I/O throughput to gateway server 804, which the gatewayserver 804 can use to determine the internal server 808 with the leastload. It is envisioned that Dynamic Load Balancing may be applied to anyservice component, including the web server, web services, data storage,databases, or even the gateway service itself.

Such Load Balancing may be improved by adding or removing internalservers 808 as conditions change. One example may be for additionalinternal database servers 808 to be added when the number of meters 702registered with the Meter Data Cloud server 424/524 exceed the spacealready allocated. Another example may be for additional web serviceprocessing internal servers 808 to be added when the average latencyacross all such servers 808 is too high. Another example may be toreduce the number of web servers serving web pages after an extendedperiod of low traffic. It is envisioned that such changes may beperformed either as a manual action by an administrative user, or as anautomatic process triggered by a monitoring component of the Meter DataCloud server 424/524.

Another implementation of a Meter Data Cloud server may be to implementa dedicated Meter Data Cloud server 424/524 for each customer. In such asystem, each Meter Data Cloud server 424/524 would have separateinternal servers 808, separate gateway servers 802, separate data,separate users, and separate addresses for the Meter Data Cloud server424/524. One example may be Customer A, which uses Cloud Server A. Whena new customer, Customer B, is added to the system, a new Cloud Server Bwould be installed and enabled, such that Customer B may only accessCloud Server B, and Customer A may only access Cloud Server A.

In one embodiment, to overcome the problem of storing a vast multitudeof meter data points is to associate (where the association is performedby server 424/524) a unique identifier which is associated with allmeter information, here called a UID, i.e., unique identifier. It isenvisioned that such a UID may be used to partition storage and queriesfor the meter data, thereby improving storage and query performance. Oneimplementation of a UID may be to use the serial number of the meter702, which is generated when the meter 702 is constructed. One examplemay be Meter A with the serial number 0123456789, and Meter B withserial number 0987654321. When Meter A posts data to the Meter DataCloud server 424/524, a processor and/or communication module of themeter 702 sends the UID A along with the data, which the Meter DataCloud server 424/524 may use to store the data in a database dedicatedto Meter A. Similarly, when a processor and/or communication module ofMeter B posts data to the Meter Data Cloud server 424/524, UID B wouldbe used to store the data. Then, when a user requests the data for MeterA, the user would use UID A, and the Cloud Server 424/524 would onlyaccess and return the data for Meter A, and not Meter B.

Another implementation of a UID may be for the Meter Data Cloud server424/524 to generate a new UID for each meter 702 that is registered withthe Meter Data Cloud server 424/524. One example may be when a processorand/or communication module of Meter A, with serial no 0123456789,registers with the Meter Data Cloud server 424/524, the Cloud Server424/524 generates UID {C7609EC5-05BA-4D22-ABDC-B940AB4COBA6}, which isreturned to Meter A for subsequent data point posts. It is envisionedthat such a Meter Data Cloud server 424/524 is configured to provide aservice to correlate meters 702 by designation, serial, and generatedUID.

Such a UID may be improved by allowing the physical meter 702, and thusthe serial number, associated with the UID to be changed. When server424/524 presents data to the user, the presentation is configured tohave the appearance of continuity, even though the physical meter 702associated with that UID has changed. One example may be Meter A1, whichuses UID A, and has uploaded data for all of the year 2017. At the endof 2017, when Meter A1 fails, and must be replaced with Meter A2, MeterA2 is programmed with UID A, and the configuration of Meter A is changedin the Cloud Server 424/524 to indicate that it is using a new physicalmeter. Meter A2 then uploads data for 2018 to UID A, and to the userquerying data for Meter A, it appears as if Meter A has continuous datafor 2017 and 2018.

Such a UID may be extended to be used for all objects in the Meter DataCloud server 424/524, including Customers, Users, as well as Meters 702.One example may be for User A, associated with Customer A, to be givenUID A {F5AD170E-AD83-4343-640B-202D852AA2F3}, and User B, alsoassociated with Customer A, to be given UID B{F47CCF15-A907-4A37-831A-AE7A1227EC0B}. In such an example, server424/524 is configured such that User A would only be able to access theinformation associated with UID A, and User B would only be able toaccess the information associated with UID B, and both would be able toaccess information associated with Customer A, which has UID C{527D2640-48EE-4A3F-A0B1-53E2AB09EA09}. Server 424/524 is configuredsuch that neither User A, nor User B would have access to informationassociated with Customer B, which has UID D{C90662B3-7187-4252-AEAD-B32D277D1FF1}.

In one embodiment, the UID may restrict what data a user can query. SuchUID's may be improved by configuring server 424/524 to associate UID'swith each other, thereby allowing UID's that are associated to accesseach other's data. One example may be for User A to be associated withCustomer A, and Customer A to be associated with Meter A, B, and C,whereby User A would have access to Meter A, B, and C's data. Anotherexample may be for User B and User C to be associated with Customer B,and User B to be associated with Meter D, E, and F. In such an exampleUser B would have access to Meter D, E, and F, but not to User C.

Such associated UID's may be improved by configuring server 424/524 suchthat associated UID's are blocked for certain other UID's, i.e., meteraccess may be assigned or restricted to users that might otherwise haveaccess. It is envisioned that such blocked UID's may be used by server424/524 to prevent users from accessing meters 702 which they otherwisemight have access. One example may be User A, which is associated withCustomer A, which is associated with Meters A, B and C. However,association with Meter A and C has been blocked by server 424/524 forUser A, and thus User A can only access Meter B.

Such UID's may be improved by configured server 424/524 to enable UID'sto be changed, without affecting the continuity of data stored in server424/524 for that object. It is envisioned that such a change may be usedby server 424/524 to prevent access by a rogue device or user, which hasgained access to the UID. One example may be Meter A, with UID A1; whenUID A1 is hijacked by a rogue device, the user generates UID A2 forMeter A, associating all of Meter A's data in the database with the newUID A2, and reconfigures Meter A to use the UID.

Such a Meter Data Cloud server 424/524 may be improved by allowingmultiple types of client applications to use and view the meter datapoints collected by the Meter Data Cloud server 424/524. In oneembodiment, multiple client applications may host multiple web serverswith the Meter Data Cloud server 424/524, each providing differentfunctionality to the user. One example may be a web server that providesa log viewer for viewing the meter historical data points. Anotherexample may be a web server that generates and displays location reportsto the user, such as, but not limited to, energy usage aggregations,fault reports, EN51060 reports, waveform graphs and monthly datasummaries. Another example may be a web server that allows the user toconfigure and generate energy or other commodity usage bill reports forthe data collected by selected meters 702. This allows the system togenerate usage bill and/or reports on the energy or other commodityusage at each circuit being measured. Another example may be a webserver that provides data query and analysis summary files for otherapplications that wish to consume and use the meter data.

It is envisioned that the web server could also display other criticaldata like meter failures, system events, meter failure data tamperingattempts or other types of critical data about not only the circuit butthe health or tampering attempts of the meter. The system can also bringback data regarding other types of data. This data can include picturesof tampering attempts wherein the meter takes a picture and send thatdata to the web server direct or through the gateway. This provides moreadvanced security in that the meter photographs images of a passwordfail attempts. The system can also be used to transmit video up to theweb server to allow the energy management system to operate as asecurity system. Additional capabilities may include the ability to lookat infrared temperatures of equipment and use that data to send uptemperature of system apparatus.

Additionally, the above information can be combined to provide acomprehensive view of a circuit and a facility. Thus, infrared apparatustemperatures combined with ambient temperatures, load and other circuitcharacteristics to provide a complete picture of the electrical circuitabove and beyond the traditional electrical a parameters.

In another embodiment, multiple client applications may be web servershosted on other Meter Data Cloud servers 424/524, or on individualservers, that access the meter data through web services provided by theMeter Data Cloud server 424/524. One example may be Client ApplicationA, which generates reports, and Client Application B, which provides adata viewer, both of which query the data from the single Meter DataCloud server 424/524.

In a further embodiment, multiple client applications may be individualapplications installed on a computer or phone, that access the meterdata through web services provided by the Meter Data Cloud server424/524. One example may be Client Application A, which displays meterdata on a phone, and Client Application B, which displays meter data ona PC, both of which query the data from the single Meter Data Cloudserver 424/524.

In one embodiment, as will be described in greater detail below, a MeterData Cloud server 424/524 may be improved by including a service thatanalyzes the data points stored for a multitude of meters, anddetermines trends and predictions about the conditions of the data andmeters, based off that data. Such analysis is often called the trainingphase of Machine Learning. It is envisioned that such a Machine Learningservice may then be applied by server 424/524 to new data points beingposted to the Meter Data Cloud server 424/524, using the analysisgenerated previously, to provide predictions about the condition ofunrelated data and meters. One example may be analyzing the measureddata points by meters 702 to identify the conditions that occur rightbefore a fault on the power grid. Another example may be analyzing theenergy usage for an entire year, correlated to the weather information,to estimate the usage for any particular meter in the near future.

As meters have hundreds of channels, with years of data, and customershave thousands of meters, this can result in trillions of data points.With that many points, not only is there a speed problem searching andquerying data, but storing the data can become prohibitively expensive.

One solution to the storage of a vast multitude of data points is tooptimize the method of storage for time series data. Time series data isdata points which are associated with a particular time, where each timepoint is greater than the previous time point, and for which the timethe data point occurs is significant. One example of time series data isa historical log of Voltage AN, where the data point is recorded every15 minutes. Another example of time series data is a Power Quality log,where each record occurs later in time then the previous record.

One implementation of a time series optimization may be to use a nonStructure Query Language (SQL) (NoSQL) database specifically designedfor time series data, such as InfluxDB, Graphite, RRDtool, or eXtremeDB.

Another implementation of a time series optimization may be to use afixed layout table in a conventional database, i.e., fixed table SQL Db,such as PostGreSQL, MySQL, MariaDb, SQLServer, or Oracle Db. A fixedlayout table is one in which all the data points are known beforehand,and the table is specifically constructed to match the known datapoints. Additionally, a single timestamp is associated with eachcollection of data points at any particular point in time. One examplemay be a system where the only data points recorded are Voltage AN,Voltage BN, Voltage CN, Current A, Current B, and Current C, and each ofthose points are known to occur at the same time. In such a system, afixed table which associates a timestamp with the six channels may beconstructed, which would minimize the impact of the timestamp oninserts, queries, and storage.

Another implementation of a time series optimization may be to use anindexed table for each data point series being stored, e.g., tablechannels, where indexed tables are database tables for which one or moreof the fields in the table are tracked, such that a search for anyparticular value does not need to look at every record in the table. Oneexample of an indexed data point table may be a table which only storesVoltage AN data point values, for all meters, wherein the index isapplied to the meter key and timestamps within the table. Anotherexample may be a table which only stores data points for Meter A, forall data points, wherein the index is applied to the channel id andtimestamps within the table. Another example may be a table which onlystores Watt Received values for Meter A, wherein the index is applied tothe timestamps within the table. It should be appreciated that in suchan implementation, a multitude of tables would be used to cover all thedata points and meters required to be stored in the database.

Another implementation of a time series optimization may be to use acustom data file that stores the value of the data point to be recordedat an offset in the file that represents the timestamp of the data pointrecord. Such a file is here called a Positional Encoded Timestamp file.One example may be a file that stores Voltage AN for Meter A as doublevalues for a day, where each sequential position in the file representsone second within that day. Another example may be a file that storesCurrent A, Current B, and Current C for Meter B as a cluster of doublevalues for a year, where each sequential position in the file represents15 minutes within that year. It is envisioned that querying a range ofvalues from such a file would only require computing the file offset as(((time_search-file_time_start)/store_interval)*data_point_storage_size).It is envisioned that such a file may be stored on a file system, or asa blob in a database entry.

In a further embodiment, a time series optimization may be to splitdatabase tables based off ranges of key values, such that internally thevalues are stored in separate locations, improving storage distributionand search speeds, but that a consistent table view is presented to theclient querying data. Such a split in tables is often called Sharding.One example may be to split data tables up by year, such that any onequery would only need to search one year worth of data. Another examplemay be to split data tables up by data point. Another example may be tosplit data tables up my meter. While sharding may be implementedtransparent to the client querying data, it should be appreciated thatit may also be implemented such that the client would have to query anexplicitly different table to find the requested data.

Another solution to the problem of data storage is to compress the datastored, reducing the amount of space it takes up in total. In oneembodiment, a common lossless compression algorithm is employed, such asDEFLATE or the variants of LZ, and compress the data in each record. Oneexample may be a SQL table that stores data point records as a pair oftimestamp and binary blob, where the blob contains a compressed array ofdoubles, where each entry in the array represents a different data pointbeing stored. Another example may be a waveform event data point, wherethe waveform samples array associated with the event is compressedbefore being stored.

In another embodiment, the compression may be to compress the entiretable or file used to store the data points, using common losslesscompression algorithms. One example may be to compress the Voltage ANdata point table for Meter A. Another example may be to compress theWatt-Hour Delivered positional encoded timestamp file for 2017/11/05 forMeter B, on 2017/11/06.

Another implementation of compression may be to use contextualreplacement based encoding for each data point. One example may be toencode frequency as a single byte, which has a value from 0 to 255,instead of a double, which is 8 times as large, by storing the frequencyas a value from 58.80 Hz to 61.20 Hz, where each value in the byterepresents 0.01 Hz. Another example may be to store voltage as a singlebyte, by storing the value as the change from the previous record value,where each value in the byte represents 0.01 V.

In one embodiment, the problem of data storage is overcome by downsampling the data stored, i.e., reducing the actual number of recordsstored. One implementation of down sampling may be to reduce the numberof values stored to a minimum interval. One example may be a Voltage ANdata point, stored every minute, may be reduced to only keep every 15minute value. Another example may be an Interval Watt-Hour data point,stored every 15 minutes, may be reduced to only keep a value every hour,where that value is the sum of the 15 minute data point values duringthat hour. Another example may be a Power Quality data point that onlyallows 20 events in a single day, and any event that occurs after thatlimit is reached is discarded. Another example may be a Waveform datapoint that only allows 2 events in a single minute, with a maximum of 20events in a single day, and any event that occurs after either of thoselimits is reached is discarded. Another example may be to only allow amaximum waveform sample resolution of 256 samples per cycle, and to downsample the waveform samples of any waveform event which exceeds thisresolution. Another example may be a Waveform Event, which down samplesthe sampling rate of the samples, based on the amount of harmonic noisedetected within the waveform, where more noise allows a higher samplingrate, and less noise forces a lower sampling rate. It is envisioned thatsuch down sampling may be performed by the device posting the data(e.g., a meter, IED, etc.), by the server receiving the data, by theservice storing the data, or by a process at a later date, after thedata has been stored at full resolution.

Down sampling may be improved by having variable down sampling rulesover time, such that the newest data has the most resolution, and theoldest data has the least resolution. One example may be to allow theVoltage AN data point to be stored at up to a one second interval forthe current week, a one minute interval for the last month, a 15 minuteinterval for the last year, and a one hour interval for the previousyears. Another example may be for Power Quality data points to allow anynumber of events for the last month, and before that, to only retain oneevent per day, with the greatest magnitude and duration.

Another solution to the problem of data storage is to move old data,that users do not have a need to view as frequently, to a secondary datastorage, here called Cold Storage, such that the recent data, herecalled Live data, is responsive to user requests. In one embodiment,Cold Storage may be a second database, with the same format as theprimary database, that is used to store old data points, where theserver has a process that moves data over a certain age limit to theCold Storage. One example may be for the server to insert the last monthof data point records to the Cold Storage at the end of the month, anddelete those same data point records from the Live Storage.

Another implementation of Cold Storage may be to use a second database,in a different format from the primary database, where the format isoptimized to reduce storage space. One example may be to use a positionencoded timestamp file that is compressed, for each month of data olderthan 1 month. Another example may be to combine all the data points fora day into a structure array, convert that to a byte array, compressthat array, and store that compressed blob as an entry in the ColdStorage database.

Another implementation of Cold Storage may be to use a second database,where the data points are down sampled when they are transferred to theCold Storage. One example may be a Voltage AN data point, which is downsampled to every 15 minutes when transferred. Another example may be anInterval Watt-Hour data point, which is summed and down sampled to everyhour when transferred.

Another implementation of Cold Storage may be to analyze and store anoverview of the data points being transferred. One example may be when a15 minute Voltage AN data point is transferred to Cold Storage, the max,min, and average value for the day may be stored instead of any singlevalue. Another example may be for the count of Current A 3rd orderHarmonic values which exceed 3% in a day to be stored. Another examplemay be to collect the magnitude of Power Quality events that occurred ina month into bins, such as 0% to 10% of fullscale, 10% to 20%, etc. Itis envisioned that such analyzed values may also be stored in the LiveStorage, in addition to the regular data points.

Another implementation of Cold Storage may be to transfer all the datafor a meter which has been disabled or removed to Cold Storage, andrestore it to Live Storage when that meter is re-enabled. One examplemay be Meter A, which has 2 years of Voltage AN, Waveform, and PowerQuality data points. When Meter A is disabled, all data associated withMeter A is transferred to Cold Storage, and when that meter isre-enabled, all data associated with Meter A in Cold Storage istransferred to Live Storage.

Cold Storage may be improved by using a storage medium which prioritizeslow cost and maximum size, over speed. It should be appreciated howeverthat low speed is not a requirement, only an acceptable condition. Oneexample of cheap storage may be to use low RPM hard drives, such as ahard disk drive (HHD), for Cold Storage, and a fast solid state drive(SSD) for Live Storage. Another example of cheap storage may be to use adisk backup tape for the Cold Storage. Another example of cheap storagemay be to use a write once storage media, such as CD, DVD, or Blue Raydisk.

Cold Storage may be improved by automatically loading the Cold Storagedata into the Live Storage when the server detects that a client isrequesting the data covered by the Cold Storage. It is envisioned thatthis would simplify data requests, such that they would only need toever request data from the Live Storage. One example may be a requestfor Voltage AN values for two years ago, which have been transferred toCold Storage, and which are transferred to Live Storage when that datais requested.

Another solution to the problem of data storage is to copy recent data,frequently accessed data, and static data, to very fast locations, oftencalled Hot Storage, such that requests for such data respond as fast aspossible. One example may be current live Voltage AN data point forMeter A, which represents the Voltage AN value that Meter A is readingat that moment. Another example may be the settings for Meter A, such asserial number and meter designation, which are frequently requested, butrarely change. Another example may be the Current B data point valuesfor the last 15 minutes.

One implementation of Hot Storage may be to use database tables whichonly contain the recent, frequently accessed, and static data. It isenvisioned that by storing a limited sub-set of the total dataqueryable, higher performance would be achieved. One example may be toonly store the last 15 minutes of Voltage AN data points in the VoltageAN Hot Table, and to delete any value over 15 minutes. Another examplemay be to store the current values of all data points for Meter A in asingle table, where each data point value is replaced as a new valuecomes in. Another example may be to use a positional encoded timestampfile, where the positional encoding is a circular buffer of the last 15minutes, and the values are replaced in the file. Another example may beto use a database table which has positions for the last 15 minutes, andthat cycles through updating those positions, rather than inserting anddeleting records. It should be appreciated that the data stored in suchHot Storage tables are copies of the data stored in the regular LiveStorage tables.

Another implementation of Hot Storage includes using prebuilt responsesto common requests, such that the data storage would not need to bequeried at all, and the response may be sent as is, or with littlemodification. One example may be that meter settings for Meter A may bestored in a JSON file, such that any request for that data just sendthat prebuilt file in response. Another example may be that theinformation about the data points stored, such as a list of registereddata points and the time range of that data, may be exported to aprebuilt JSON file to use for any requests.

Another implementation of Hot Storage may be to include a memory cacheof values, such that read and write times are as short as possible. Oneexample may be to store all the current readings for a meter instructure in memory, and that memory structure may be used whenever auser queries the current readings from the server. Another example maybe to store a positional encoded timestamp file for the current day inmemory, as well as storing it in a database. Another example may be tostore live analysis values, such as, but not limited to, max, min,average, sum, harmonic frequency analysis, thd, or cost, in memory, andto allow the user to query these computed data points, even though theyare not stored in the database.

Another implementation of a cache may be to use a distributed cachesystem, such as, but not limited to, Memcached, Redis, or Couchbase, tocache any value that the server sees requested frequently. One examplemay be a set of data points for Meter A for the month of March, whichthe server sees has been requested twice in a single minute, may bestored in the cache, to be queried directly until that cache valueexpires. Another example may be two distributed cache servers, Cache A,and Cache B, which is stored with Server A, where Cache A is closer tothe requesting User A then the main Server A. In such a system, Cache Amay cache responses to User A, so that when User B requests data, CacheA would already have the data ready to respond, and the request wouldnot need to go to Server A. In such a system, Cache B would providecaching for requests from Cache A, and for users closer to Server A thenCache A.

It is to be appreciated that the data may be stored based on locality oftime, e.g., where a customer, meter, or server is located, or storedbased on UTC time.

One solution to the problem of managing a multitude of meters 702 is forall communications with, and configuration of, the meter 702 to be doneby leaving a message on the Meter Data Cloud server 424/524, which aprocessor and/or communication device of the meter 702 periodicallyqueries, and either performs the requested action, or posts therequested response back to the server 424/524. For the purposes of thepresent disclosure such a protocol will be referred to as a ServerHosted Command Protocol. It is envisioned that with such a protocol,meters 702 may have dynamic IP addresses, and no user would need todetect that address to communicate with the meter 702.

Referring to FIG. 13A, an embodiment of Cloud Server 424/524 is shownimplementing a Server Hosted Command Protocol. As shown in FIG. 13A,server 424/524 includes at least one processor 1002 and at least onememory 1006. A message queuing system 1006, authentication module 1008,and file command system 1010 may be stored in memory 1004 and executedby processor 1002. In one implementation of a Server Hosted CommandProtocol, Meter Data Cloud server 424/524 uses a message queueing system1006, such as, but not limited to, Advanced Message Queuing Protocol(AMPQ), Message Queuing Telemetry Transport (MQTT), Rabbit MessageQueuing (RabbitMQ), or a custom HTTP web service, wherein a processorand/or communication device of the meter 702 periodically queries themessage queue 1006 for new commands and data requests, and a user postsrequests into the queue 1006. In such a system, the meter 702 wouldrespond to the user by posting a message to the queue 1006 for the user.Referring to FIG. 13B, one example may be a meter's programmablesettings may be updated by User A (e.g., client 428/528/628) postingMessage A, which contains the settings to be changed, along with theupdate programmable settings command, to the Message Queue A 1006 onserver 424/524, (step 1012). In step 1014, a processor and/orcommunication module of the Meter A would read Message A, and updateMeter A's settings, or perform any other action based on Message A, instep 1014. After updating Meter A's settings, the processor orcommunication module of Meter A, e.g., IED 702, would post success withMessage B to Message Queue A, in step 1018. User A would subsequentlyread Message B to be notify that the updating of Meter A's settings weresuccessful, in step 1020. It is to be appreciated that in such a queuingsystem, the user or the server writes a command, e.g., as a message, toa message queue. This may occur automatically (e.g., the serverdetecting an event on a meter), or at a user's action (e.g., a userrequests a reset). No command is sent to the meter. Instead, the meterqueries the server periodically for any messages for the meter in themessage queue, i.e., the server never tells the meter it has a message,it only responds when the meter requests if it has any messages. In oneembodiment, the message sent to the message queue includes a specialcommand, e.g., a reset, update, etc., where the meter and/or serverwould need to parse from the message. In certain embodiments, the meterand/or server may have at least one additional processor to parse thecommand from the message.

Another example may be to send Message C, which contains a Modbus TCPmessage for a processor of Meter A to process and generate a responseto. In this example, since the message includes a Modbus TCPmessage/command, the meter may interpret the message using a built-inModbus engine.

Another implementation of a Server Hosted Command Protocol may be forthe Meter Data Cloud server 424/524 to store commands to and from themeter 702 in files on the server 424/524 using a file command system1010, which users and meters 702 may read and post to exchangeinformation. One example may be an arrangement where each meter 702 hasan “in” file stored in a corresponding database 1012, which users postmessages to, to send messages to via communication with server 424/524the meter 702, and an “out” file stored in a corresponding database1014, which meters 702 post messages to via communication with server424/524, to send responses to the user. It is to be appreciated that isthis example, the queue is a file system rather than a queuing softwareas described above.

A Server Hosted Command Protocol may be improved by requiring that theserver, often called the Command and Control, or CnC, server, bestrongly authenticated before any commands are executed, and prove thatthe server is a legitimate CnC server. It is envisioned that suchauthentication may prevent malicious servers, pretending to be the CnCserver, from erroneously executing commands on the meter. One examplemay be for the meter to require the CnC server to provide an authorizedDigital Certificate stored in authentication module 1008, beforeexecuting any commands. Another example may be for the meter to performa handshake with the CnC server, such as requesting files in aparticular order. It is to be appreciated that the authentication module1008 may perform various methods of either authenticating the meter orauthenticating itself to a meter.

By collecting large amounts of data related to a single meter and/or toa large plurality of meters (e.g., a plurality of meters disposed in aparticular geographic location, a particular building, a facility oreven worldwide), automated data analysis may be performed to generatemeter condition and trend predictions. In one embodiment of automateddata analysis, a system with an algorithm is provided with a set ofknown data, often called a training set, which the algorithm analyzes toprovide an optimal or correct solution, often called learning from thedata. Such an algorithm, using the learned solution, is then applied toa set of data novel to the algorithm, to determine how well the new datamatches with the known data, and to predict new information about thatdata set. For the purposes of the present disclosure, such a system willbe referred to as a machine learning algorithm or artificialintelligence (AI). One example may be video system where the algorithmis trained with images of birds, and then applied to a video feed tonotify a user whenever a bird is detected near a particular device, suchas a power line, and ignore non-bird objects near the device, such as afloating piece of paper. It should be appreciated that such detectiondoes not perform an exact pixel match between images; however, incertain embodiments the detection does perform a pixel match.

In the context of the present disclosure, the machine learning algorithmand automated data analysis may be implemented in a system 1100 shown inFIG. 14 , also known as an artificial intelligence (AI) system. System1100 includes a data library 1102 for storing data samples, machinelearning module 1104 for executing one or more machine learningalgorithms on data samples received from library 1102 and outputting aprediction and/or recommendation based on the received samples, and anaction module 1106 for receiving the output (e.g., predictions and/orrecommendations) from machine learning module 1104 and performing anaction based on the output. It is to be appreciated one or morecomponents of system 1100 may be implemented in any of the IEDsdescribed above, where data library 1102 may be incorporated in one ormore memories of the IED and modules 1104, 1106 may be software (e.g.,stored on one or more memories of the IED) executed by one or moreprocessors of the IED. Alternatively, one or more components of system1100 may further be incorporated in one or more servers, e.g., servers424, 426, 524, 530, 628, 630, and/or the Meter Data Cloud server,described above. The server incorporating system 1100 may be incommunication with one or more IEDs via an internal network or anexternal network. In this way, actions performed by module 1106 based oninputs from module 1104 may include communication signals (includingalerts, notifications, control signals for controlling one or more IEDsor components coupled to the IEDs, and/or any other types ofcommunications) via networks 422, 522, 622, 416, 516, 616. It is to beappreciated that the data in data library 1102 may be received fromMeter Data cloud server, one or more IEDs, or any other sources. In oneembodiment, each of the IEDs may provide various data to a serverincluding library 1102, such as server 424, 524, etc. In anotherembodiment, various data may be collected from each of the IEDs by anaggregator, such as server 630, 630, and then provided to a server suchas servers 424, 524 including system 1100.

One machine learning algorithm that may be used by module 1104 is onewhich takes a set of input values from library 1102, transfers thosevalues though a connected graph of nodes, here called a network, whereeach node applies a summation function between its inputs, and applies aweighting function on the output, to generate a set of output values tobe provided to action module 1102. In such a network, during thetraining phase, the value of the weighting function is adjusted to makethe known input set match the known output set. Such an algorithm isoften called an Artificial Neural Network, or ANN. One example of anArtificial Neural Network may be a set of 7 inputs provided to module1104 by library 1102, which include 3 voltage phases, 3 current phases,and frequency readings, an interior network of 20 connected nodes, and asingle output value outputted by module 1104 that gives the noise on apower distribution system monitored. If the noise distribution is abovea predetermined threshold, action module 1106 may send a communicationsignal to one or more clients indicating the noise distribution. It isto be appreciated that the communication signal may be, but is notlimited to, an e-mail, a text message, a tweet, etc. Another example maybe a set of 60 voltage inputs received from library 1102, one for eachminute in the previous hour, and two output values outputted by module1104, one that predicts the likelihood of a fault in the next 10minutes, and the other the magnitude of the fault. If the likelihood ofthe fault is above a predetermined threshold and/or the predictedmagnitude is above a predetermined threshold, action module 1106 maysend a communication signal to one or more clients. Alternatively, theaction module 1106 may send a control signal to one or more IEDs and/orcontrol devices to turn off or shut down at least one load that isassociated to a location of the fault. In certain embodiments, theaction module 1106 may send the communication signal and control signalsubstantially simultaneously to alert the user of the client of theshutdown. Alternatively, the communication signal may be sent first witha predetermined time delay before sending the control signal, so a usermay have the predetermined time to rectify the fault before the shutdownof equipment.

Another algorithm that may be used by module 1104 is one that applies asecond algorithm to compute the error contribution of each node in anArtificial Neural Network, often called the loss function, and thenapplies the determined loss function to adjust the weighting function ofeach node. Such an algorithm is often called a Backpropagation, and canbe used by module 1104 to adjust the network to find the local optimalsolution to an input-output problem.

Another algorithm that may be used by module 1104 is one that layersArtificial Neural Networks together, such that the set of outputs fromone layer are the inputs to the next layer, with one or more layerbetween the initial input and final output, often called hidden layers,and that each layer can be trained individually to improve the overallperformance. Such a layering of networks will be referred to as a DeepLearning, or a Deep Neural Network. One example may be a network wherethe first layer is trained to classify noise introduced into a powerline from an input set of harmonics, which is fed into a second layerthat identifies possible sources of such noises, which is fed into athird layer that identifies the most likely source. Some exemplarysources may be noise of natural origins (electrostatic interference andelectrical storms), electromagnetic interference (e.g., from currents incables along the power distribution system), radio frequencyinterference (e.g., from radio system radiating signals which interactwith the power distribution system), and/or devices which produce spikein voltage, current, or harmonics (e.g., large electrical motors beingswitch on, lighting circuits, converters or drive systems, etc.). If thelevel of noise is above a predetermined threshold, action module 1106may send a communication signal to one or more client devices indicatingthe source of the noise and that action may need to be taken. If thesource of the noise is a device, action module 1106 may send a controlsignal to the device or a device (e.g., an IED) the controls the noisegenerating device to turn of the noise generating device. Anotherexample may be one that performs the same identification describedabove, but combines the final input with another input layer (e.g., afourth layer) that uses the original harmonic information to identifythe likelihood that that device (e.g., the device causing the noise)will fail, and in what timeframe the device will fail. The identifiedlikelihood may be outputted by module 1104 to module 1106. If theidentified likelihood is above a predetermined threshold, module 1106send an alert (e.g., via network 422, 416, 522, 516, 622, 616) to aclient (e.g., user computer, monitoring system, etc.) to identify thedevice likely to fail and to service and/or replace the device.Furthermore, action module 1106 may send a control signal directly toone of the IEDs or another controlling device to cause the device thatis likely to fail to be shut down.

Another algorithm that may be used by module 1104 is one in which nodesin layers are only connected to the nearest, but which stack nodes in alayer to a configured depth, and in which take a small condensed outputof a previous layer as input to all nodes depth-wise in the layer, butonly a small segment width and breadth wise, thus giving spatiallocality to the input. Such a layer will be referred to as aConvolutional Layer, and such an algorithm a Convolutional NeuralNetwork, and would improve performance for inputs where spatial localityis significant. One example may be to use as input from library 1102 aseries of waveform samples across all voltage and current channelinputs, and as output of module 1104 the probability of various causesof the waveform trigger. In such an example, the temporal nature of aseries of waveform samples would benefit from the spatial arrangement ofa Convolutional Neural Network, as would the temporal interconnectionbetween the various channel inputs. Each subsequent convolution layerwould identify sub-features in the waveform, and how each channelinter-relates, until a final output identification is given to actionmodule 1106. The identified cause(s) of the waveform trigger may becommunicated by action module 1106 to one or more client devices. If theidentified cause can be corrected via a software update to or restart ofone of the IEDs, action module 1106 may send one or more control signalsto the IEDs to cause a software update or restart to correct the causeof the identified waveform trigger.

Another algorithm that may be used by module 1104 is one in which theoutputs of some nodes are fed as inputs to previous layers, adjustingalgorithm parameters, thereby adjusting the result over a temporalsequence of input sets during detection. Such an algorithm is oftencalled a Recurrent Neural Network. One example may be a sequence ofvoltage, current, and frequency values (i.e., measured by one or moreIEDs) inputted to module 1104 via library 1102 to predict what theenergy usage will be in the next interval. The predication may beoutputted to action module 1106 and action module 1106 may communicatethe predicted energy usage to one or more clients. Action module 1106may be configured to communicate the predicted energy usage to the oneor more clients if the predicted energy usage is above a predeterminedthreshold. Action module 1106 may further be configured to send acontrol signal to a client, one or more IEDs, or a control facility,etc., to shut off one or more loads if the predicted energy usage isabove the predetermined threshold. Thereafter, if the predicted energyusage falls below the predetermined threshold, action module 1106 maysend a control signal to cause the loads to continue to consume power.It is to be appreciated that the predetermined threshold may be selectedby any machine learning algorithm or function described herein. Forexample, the predetermined threshold may be based on load sheddingparameters including, but not limited to, time of day, designation ofequipment as essential or non-essential, real-time pricing issued by autility, etc.

In another embodiment of a Recurrent Neural Network employed by module1104, some components are composed of a value storage, and threefunctions that regulate the values input, output, and the update of thevalue storage. Such an arrangement may be used to augment the long termtemporal retention of events input to a Recurrent Neural Network, and isoften called a Long Short-Term Memory components. One example may bewhere module includes a Recurrent Neural Network using Long Short-TermMemory nodes to take a series of power values over the course of apredetermined time interval (e.g., a day) as input from library 1102,and use the data to predict the power conditions in the next hour.Another example may be that module 1104 takes a series of eventsrecorded by a meter or IED as input, such as system events, or securityevents, over the course of the day, to detect or predict attempts atintrusion or tampering (e.g., of one or more IEDs at a facility) by amalicious user. Action module 1106 may use the detected attempts ofintrusion or tampering to send one or more alerts to one or more clientsindicative of the detected attempts of intrusion or tampering. Actionmodule 1106 may further use the detected attempts of intrusion ortampering to increase a security state (e.g., require more factors ofauthentication at an IED or facility) to reduce the risk of intrusion ortampering until the intrusion or tampering is otherwise dealt with.

Another algorithm that may be used by module 1104 is one that startswith a set of randomized solution functions, picks the solution thatbest maps the input to the output, often called selection, creates a setof random changes to that solution, often called mutations, and testthose solutions. This cycle of selection and mutation, which is repeateduntil an optimal solution to the problem is found, will be referred toas a Genetic Algorithm, or an Evolutionary Algorithm.

In addition to the various algorithms described above, the module 1104may employ other algorithms or functions including, but not limited to,linear regression, logistic regression, linear discriminant analysis,classification and regression trees, naïve bayes, k-nearest neighbors,learning vector quantization, support vector machines, bagging andrandom forest, boosting and Adaboost, etc.

One set of data stored in library 1102 that may be used as input to suchalgorithms in module 1104 may be a meter's or IED's live readings. Oneexample may be to use electrical parameters, such as, but not limitedto, the voltage, current, and frequency channels measured by one or moremeters. Another example may be to use the instantaneous power computedby one or more meters. Another example may be to use the accumulatedenergy or interval energy computed by one or more meters. Anotherexample may be to use the internal temperature of each meter, measuredby each meter.

Another set of data stored in library 1102 that may be used as input tosuch algorithms in module 1104 may be a meter's or IED's computedreadings. One example may be where module 1104 uses the harmonics or THD(total harmonic distortion) readings computed by one or more meters overa time domain, from voltage, current, and frequency channels measured bythe one or more meters. Another example may be where module 1104 usesthe interharmonic computed by the meter or IED as input from library1102. Another example may be where module 1104 uses the phase anglereadings computed by the meter or IED.

Another set of data that may be stored in library 1102 and used as inputto such algorithms in module 1104 may be external measurements whichhave been input into the meter or IED, either digitally, such as pulsecounters, or analog, such as analog inputs. One example may be a water,gas or steam flow counter, which feeds pulses into the meter to count.Another example may be a pressure sensitive mat, motion sensor, orinfrared light beam trip line, which count traffic through a door orhallway, and feed pulses into the meter to count. Another example may bea temperature probe, which converts a measured range of temperature intoa defined output range of DC Voltage, which is fed into an analog inputin the meter to measure.

Another set of data that may be stored in library 1102 and used as inputto such algorithms in module 1104 may be a history of the live readings.One example may be a history of voltages over the last hour, with eachinput point a one-minute interval over that hour. Another example may bethe 15 minute interval energy values over the course of a day.

Another set of data that may be stored in library 1102 and used as inputto such algorithms in module 1104 may be waveform signatures oftriggered events or faults occurring on the power distribution system,such as Power Quality and Digital Input events, recorded by one or moremeters or IEDs. Exemplary Power Quality and Digital Inputs events mayinclude, but are not limited to, transients such as a surge or spike,interruption of supply voltage or load current, sag or undervoltage,swell or overvoltage, waveform distortion, voltage fluctuations, etc.Based on the waveform signatures measured by the one or more IEDs andother data in library 1102 (e.g., live readings of the powerdistribution system measured by the one or more IED and sent to library1102), module 1104 predicts at least one type of fault likely to occurin a predetermined future time interval and a number of predicted futureoccurrences of the predicted at least one type of fault in thepredetermined future time interval. One example may be to store inlibrary 1102 the time, duration, magnitude, and triggering channel anduse this data as inputs to module 1104 for each event. Another examplemay be to store in library 1102 statistical analysis, such as max, min,average, and sum, of components of an event, such as duration,magnitude, and channel, of events which occur within a time period, suchas a minute, an hour, or a day, and use this data as inputs to module1104. Another example may be to store in library 1102 the time domainand magnitude of each event over a period, such as a minute, an hour, ora day, broken into discrete inputs in the time domain, such as seconds,minutes, or hours, as inputs to module 1104.

Another set of data that may be stored in library 1102 and used as inputto such algorithms in module 1104 may be the samples of a Waveform Eventrecorded by each meter or IED. One example may be where module 1104 useseach sample in the recorded waveform event as a set of inputs. Anotherexample may be where module 1104 uses the computed RMS voltage orcurrent, over a sub-segment of the event, such as a quarter-cycle,half-cycle, or full-cycle, as a set of inputs. Another example may bewhere module 1104 uses the harmonics or interharmonics, computed fromthe samples of one or more cycles, as a set of inputs.

Another set of data that may be stored in library 1102 and used as inputto such algorithms in module 1104 may be System Events recorded by themeter or IED. One example may be to store in library 1102 the time, andtype of event as inputs for each event. Another example may be to storein library 1102 the count and statistical distribution of events overthe course of a period of time, such as an hour, or a day, as an inputset to module 1104.

In any of the examples above, each of the data stored in library 1102and inputted to module 1104 may be used by module 1104 to makepredictions and/or recommendations as to faults, energy usage, devicefailure, etc. and then by action module 1106 to send communicationsindicating the predictions and/or send control signals to a client orIED to cause a desired change (e.g., a shutoff of a component or IED, arestart, etc.) based on the predictions.

Another set of data that may be stored in library 1102 and used asinputs to such algorithms in module 1104 may be Security Logs of loginand secure action attempts to a meter. One example may be where module1102 uses the temporal sequence of successful and failed login attemptsto detect intrusion attempts. When an intrusion attempt is detected,action module 1106 may send an alert to one or more clients and/or senda control signal to increase a security state (e.g., require additionalpoints of authentication for access to an IED or facility and/or shutdown an IED or facility).

Another set of data that may be stored in library 1102 and used asinputs to such algorithms in module 1104 may be an internal analysis ofthe meter's computation. One example may be where module 1104 uses thefree compute cycles of the meter, measured current, and internaltemperature, to predict the likelihood that the mechanical components ofthe meter will fail. If the likelihood of failure is above apredetermined threshold, module 1106 may send an alert to one or moreclients to replace the mechanical component. Another example may bewhere module 1104 uses the max, min, and mean times to perform a knownfunction, within a period, within the meter, to analyze the efficiencyof the meter's firmware implementation. Module 1104 may output a value(e.g., a percentage, score, etc.) associated with the efficiency of themeter's firmware implementation to action module 1106. In oneembodiment, if the value is below a predetermined threshold, actionmodule 1106 may send an indication to one or more clients (e.g., servicepersonnel) that a meter's firmware implementation is underperforming. Inanother embodiment, if the value is below a predetermined threshold,action module 1106 may send a recommendation one or more clients (e.g.,a user's computer) to install a different firmware implementation on themeter.

Another set of data that may be stored in library 1102 and used asinputs to such algorithms in module 1104 may be the latency ofcommunications between one or more meters and the Cloud Server (e.g.,servers 424, 426, 524, 530, 630, etc.). One example may be for eachmeter to measure the instantaneous, average, max, and min times it takesfor the Cloud Server to respond to a data point post request. Thesemeasurements are reported by each meter to the Cloud Server and storedin library 1102. Module 1104 is configured to use these inputs to assessthe health of the communication network and/or the communicationcapability of each meter or IED, e.g., by determining or predictingnetwork health as a percentage and/or communication capabilities of eachmeter as a percentage. If any of the determined percentages fall below apredetermine threshold, action module 1106 is configured to send acommunication signal to one or more clients indicating that a networkand/or communication capabilities of an IED requires servicing.

Another set of data that may be stored in library 1102 and used asinputs to such algorithms in module 1104 may be the network traffic toand from one or more meter. One example may be to use the source IPaddress and timing of requests to each meter as inputs to module 1104.Another example may be to use the total data throughput within a periodof time, such as a minute, an hour, or a day, as input to module 1104.Another example may be to use a statistical analysis of the types anddestinations of requests over a period of time, as input to module 1104.Module 1104 may use any of this data to determine if an issue existswith network traffic and output a value indicative of the networktraffic to action module 1106. Based on the value outputted to actionmodule 1106, module 1106 may send a communication signal to one or moreclient devices and/or send a control signal to one or more IEDs tocorrect the issue. For example, action module 1106 may, via a controlsignal, reboot, update, or shut down one of the IEDs to correct thenetwork traffic issue.

Another set of data that may be stored in library 1102 and used asinputs to such algorithms in module 1104 may be live data recorded byother devices. One example may be to use weather data, such astemperature, wind speed, humidity, air pressure, and precipitation, fora particular location, requested by the Cloud Server as input to module1104. Another example may be a pedestrian traffic counter that measuresthe traffic in a building, fed into the Cloud Server to be stored inlibrary 1102 and input to module 1104. Another example may be a pulsecounter on doors and windows, that measure how often they are opened,and for what durations, where the measurements of the pulse counter arestored in library 1102 and input to module 1104. Another example may bemotion sensors in a building, that measure the frequency and duration ofactivity, where the measurements of the sensors are stored in library1102 and input to module 1104. Another example of data that may bestored in library 1102 and used by module 1104 is the heating andcooling conditions in a building, including temperature, heating andcooling activity and duration, and boiler temperature. Another exampleof data that may be stored in library 1102 and used by module 1104 isthe state and duration of building lights in rooms and outside thebuilding being on.

Another set of data that may be stored in library 1102 and used asinputs to such algorithms in module 1104 may be user configuredinformation. One example may be the geo-location of a meter or facility.Another example may be facility information, such as number ofemployees, number of residents, square footage of the facility, ornumber of rooms in the facility. Another example may be the ratings ofthe CT's connected to the current inputs of each meter. Another examplemay be an install date of peripheral hardware, such as CT's (i.e.,current transformers) and PT's (i.e., potential transformers). Anotherexample may information relative to peripheral hardware, such as ratedlifespan and model of hardware. This information may be used by module1104 to determine various correlations in making predictions and/orrecommendation.

It is to be appreciated that the algorithms stored in module 1104 may betrained using any one of various training methods, such as, but notlimited to, supervise, unsupervised, q-learning, temporal differencelearning, stream, etc.

One application of system 1100 may be to predict energy usage for one ormore meters, locations, or facilities in the future based on data storedin library 1102 and to use action module 1106 to send communications toone or more clients communicating these predictions and/or send controlsignals to one or more facilities or IEDs to prevent and/or act upon oneof these predictions. In one embodiment, based on data stored in library1102, module 1104 predicts the energy usage of a location for every 15minute interval in the next hour. In another embodiment, based on datastored in library 1102, module 1104 predicts the total energy usage andcost of a facility or building, for the next month. Action module 1106may be configured to receive the predicted energy usages from module1104, and if the predicted energy usages for a given future time frame(e.g., the next 15 minutes, the next day) is above a predeterminedthreshold, module 1106 send a notification or alert to one or moreclients warning of an expected increased demand. Action module 1106 mayfurther send a control signal to shut off or otherwise limit one or moreof the loads which are predicted to cause energy consumption above thepredetermined threshold. If the predicted energy usages are below asecond predetermined threshold, action module 1106 may send acommunication signal to one or more clients that additional energy maybe consumed by a load or action module 1106 may send a control signal tocause additional energy to be consumed by a load. In this way, actionmodule 1106 may use the predictions of module 1104 to perform loadbalancing across a network.

In one embodiment, the multitude of historical meter data stored inlibrary 1102 is used to train a machine learning algorithm in module1104, such that module 1104 can identify common energy usage types, topredict the energy usage for each of those types, and applies thetrained algorithm to the live readings of each meter, thereby predictingthe future energy usage. It is envisioned that such an implementationwould benefit from a temporally aware algorithm, such as a RecurrentNeural Network. Action module 1106 may send an alert or notification toone or more clients if the predicted future usage is above or below apredetermined threshold and/or send one more control signals to IEDs orfacilities based on the predicted future usage, as described above.

Another implementation may apply the trained algorithm to the historicalreadings of each meter stored in library 1102 as input to module 1104,such that each input to the algorithm in module 1104 is a historicaltime slice, thereby enabling module 1104 to predict the future energyusage. Thereafter, action module 1106 may send an alert, notification,and/or control signal based on the predicted future usage, as describedabove. One example of the time slice may be the 15 minute intervalvalues over the last two hours, resulting in 8 inputs, and may have oneoutput that predicts 15 minutes in the future. Another example may bethe daily values for the last year, resulting in 365 inputs, and mayhave 96 outputs that predicts the energy usage for every 15 minutes inthe next day.

Another implementation may be where module 1104 takes the outputs ofother trained sets, such as one based on the historical readings (e.g.,voltage, current, frequency, etc.) of meters, and one based on the livereadings of the meter, along with information about the environment topredict the energy usage for a predetermined future time interval.Action module 1106 may then use the predicted energy usage to send analert, notification, or control signal, as described above. One examplemay be a historical input set of meter data that is used by module 1104to compute daily interval predictions and combine the predictions withthe live readings of the meter, along with the current weatherconditions, such as temperature, precipitation, and humidity, to predictthe energy usage for the next day. Another example may be where module1104 uses the historical input set of meter data, coupled with anotherhistorical input set of real time pricing for one or more locations ofone or more meters, and combines it with live meter environmentalconditions, to both predict energy usage for the next day, predict realtime pricing costs for the next day, as well as make recommendations asto when the ideal periods within the predetermined future time intervalto lower and increase usage are to reduce costs. The predictions andrecommendations may be sent to one or more clients by action module1106, where the trend prediction may be presented as a graph. Actionmodule 1106 may further use the predictions to send one or more controlsignals to IEDs and/or facilities (e.g., the control signals are sent toclient devices within each of the facilities having control of variousloads) to turn on and off loads increase or decrease energy usage in away that lowers cost.

Another application of machine learning system 1100 may be to use module1104 to predict faults for one or more meters, locations, and/orfacilities in the future. One example may be where module 1104 predictsthe likelihood of different kinds of power quality faults in the nexthour, based on trends in the live meter readings. Based on thepredictions, action module 1106 may warn one or more users (e.g., viasending communication signals) when the likelihood of a fault occurringwithin the next minute exceeds a limit. Another example may be whereaction module 1106 uses the likelihood predicted by module 1104 to senda command to one or more clients, IEDs, a facility, etc. that maymitigate the fault, such as flipping a relay or other control devicethat temporarily disconnects the faulting line. Another example may bewhere action module provides the user (via one or more communicationsignals to the user's client device) with a way to explore thelikelihood of various types of faults due to a proposed future action.For example, the user may, via a UI (e.g., UI server 426) input variousproposed future actions, and module 1104 take the proposed futureactions as input to predict the likelihood of various types of faultsdue to the proposed actions. The predicted likelihood of fault may thenbe communicated to the user via action module 1106. In this way, theuser may test various scenarios to avoid fault occurrences.

One implementation may take as input via library 1102 to module 1104 thehistory of power quality events, as well as the live power qualityreadings of the meter. One example may be where module 1104 uses thehistory of power quality events, coupled with the historical readings,of various meters as training sets, then applies the temporal sequenceof live readings in the prediction of events. Based on the eventspredicted by module 1104, actions module 1106 may send communicationssignals to one or more clients indicating the predicted event. Actionmodule 1106 may also send one or more control signals to prevent theevent (e.g., to an IED or a facility to shut off a component, turn offone or more loads, etc.)

Another implementation may also take as input via library 1102 to module1104 the surrounding conditions. One example may be to store theconditions of connected wiring, CT's, PT's, and other connectedhardware. It is to be appreciated that such hardware conditions mayeither be a value entered by a user or predicted by another algorithm.Another example may be to store the environmental conditions, such astemperature, pressure, and humidity in library 1102.

Another implementation may be to use the fault predictions made bymodule 1104 for individual meters as inputs to module 1104 for the faultprediction for the location that those meters are at. One example may bea tenant building, where each floor is measured by a meter, and thefault likelihood of the entire building, which is fed by the same mainline, is predicted by module 1104 by using the individual floor's faultlikelihood. As described above, action module 1106 may then communicatethe fault likelihood by sending communication signals to clients or takeaction to prevent the fault likelihood by sending one or more controlsignals to IEDs, facilities, etc.

Another implementation may use the predicted demand for a locationdetermined by module 1104 as one of the inputs to module 1104 for faultprediction for one or more meters. It is envisioned that a spike indemand may lead to faults, as power generators struggle to keep up withthe usage. One example may be a demand spike due to a hot day, as airconditioners are turned on.

Another implementation may use the most recent fault conditions recordedby unrelated meters, that are in the same geo-location, as inputs tomodule 1104 for the fault prediction for one or more meters meter. It isenvisioned that when faults occur in an inter-connected power grid,those faults can have cascading effects spreading from the point offailure. One example may be sag in voltage due to a power line beinginterrupted by a falling tree, which causes other paths in theinter-connected power grid to compensate, possibly triggering otherfaults. Based on the most recent fault conditions recorded by unrelatedmeters that are in the same geo-location, module 1104 predicts a faultfor one or more meters (other than the unrelated meters) and actionmodule sends a communication signal indicated the predicted failure ofthe meters and/or sends a control signal to an IED, facility, etc., toattempt to prevent the fault to the one or more meters.

Another implementation may use the historical readings and power qualityevents of a meter as input to module 1104 to classify which faultscenario a given meter belongs to and subsequently use the classifiedfault scenario to determine which fault prediction algorithm is best forthat meter. It is envisioned that each meter installation would havedifferent environmental conditions, but that these conditions would fallwithin limited groups of similarities, and that these environmentalconditions are unlikely to change after installation. One example may bea residential meter, which is exposed to neighborhood upstream faults,such as seasonal brownouts, and simple downstream faults, such as shortcircuits. Another example may be a meter in a manufacturing building,which is primarily exposed to downstream faults caused by the machineryused in the manufacturing. Another example may be an office building inthe neighborhood of a large energy consumer, such as a steel manufactoryor super collider, which inject large amounts of noise on the upstreamsignal. It is to be appreciated that such lists are not meant to beexhaustive.

Another implementation may where module 1104 takes a proposed action tothe meter or grid, as input from a user (e.g., inputted via a UI coupledto system 1100), along with other fault predictive inputs, and outputthe likelihood of that action causing a fault. The action module mayprovide the likelihood to a client device (e.g., including a UI used bya user to input proposed actions). In this way, a user may test proposedactions using system 1100 to predict the likelihood of a given proposedaction causing a fault. One example of a proposed action may be aplanned meter downtime, wherein the user disconnects the meter from thepower grid, temporarily shutting off power. Another example of aproposed action may be power line service, wherein that segment of thepower grid may be shut down temporarily, increasing the load on othersegments.

Another application of machine learning system 1100 may be use module1104 for the determination of the cause of faults, after they haveoccurred. One example may be where module 1104 determines based on datastored in library 1102 the likelihood that a fault was of any particulartype, such as, but not limited to, a downstream short circuit, anupstream brownout, an upstream short circuit, upstream noise on thepower line, or in-rush current caused by devices downstream. Anotherexample may be where module 1104 determines the likelihood came from aparticular source, such as, but not limited to, manufacturing loads, apower line drop out, air conditioner usage, or downstream wiring.Another example may be where module 1104 identifies where a fault mighthave occurred, in relation to the meters in a facility. In any of thesedeterminations, action module 1106 may send communication signals to oneor more client devices indicating the determined causes, locations,and/or likelihoods. Action module 1106 may further send control signals(e.g., software updates, restart signals, shutoff signals) to IEDsand/or facilities to correct and/or prevent the causes from occurring.In some embodiment, module 1106 sends the communication signals and/orcontrol signals if the determined likelihood is above a predeterminedthreshold.

One implementation may store in library 1102 and take as input awaveform event, including the triggering channel and time, and thewaveform samples recorded. One example may be a waveform event composedof 6 sample channels, Voltage AN, BN, CN, Current A, B, and C, where thetrigger was a sag on Voltage BN, and the samples for Voltage BN show adip for a couple of cycles, and a surge in the corresponding Current Bsamples 20 milliseconds later.

Another implementation may store in library 1102 and take as input tomodule 1104 waveform events from multiple devices in a similargeo-location. One example may be a set of 10 meters in a facility, whichall see a fault at slightly different times, and which identify thegeo-location of the fault by the time delay. Another example may be aset of 20 meters in a residential neighborhood, which are used togetherto refine the likelihood of any particular fault type.

Another implementation may store in library 1102 and take as input tomodule 1104 the surrounding conditions. One example may be to use theconditions of connected wiring, CT's, PT's, and other connected hardwareas data stored in library 1102 and as input to module 1104. It isenvisioned that such hardware condition may either be a value entered bya user or predicted by another algorithm. Another example may be to usethe environmental conditions, such as temperature, pressure, andhumidity as data stored in library 1102 and as input to module 1104.

Another application of machine learning system 1100 may be to use module1104 for the detection of security threats to one or more meters or tothe networks the meters are coupled to. One example may be where module1104 detects an intrusion by analyzing the pattern of security loginattempts stored in library 1102. In another example, module 1104 detectsa malicious user by analyzing images transmitted from the IED or meterusing facial and/or Iris recognition to determine if the user isauthorized or not. An exemplary IED or meter having image capturecapabilities is disclosed and described in commonly owned co-pendingU.S. application Ser. No. 16/040,683, the contents of which are herebyincorporated by reference. Images received from at least one IED ormeter may be stored in library 1102 and processed by module 1104 todetermine if the user is authorized or not. Another example may be wheremodule 1104 performs network probing detection, which might indicate amalicious host on the network, by analyzing the attempts to query themeter. In either case, action module 1106 may use the detected securingthreat or detected probing to send one or more alerts or notificationsto one or more clients and/or send one or more control signals to IEDs,facilities (e.g., to shut off a compromised port, network, IED, etc.) toprevent the threat or probe detected.

In another embodiment, system 1100 is used to determine and predictcomponent wear percentage. One example may be where module 1104 computesthe estimated remaining life of a related hardware component, such as,but not limited to, connected wiring, CT's, PT's, or relays based onsamples provided via module 1102. When the estimated remaining life ofany of the hardware components is below a predetermined threshold value,action module 1106 may send an alert to one or more one or more clients(e.g., users or technicians) indicating the hardware component requiresreplacement or repair. Another example may be where module 1104, basedon sample data from library 1102, computes the wear percentage andefficiency of related hardware components, which may impact theefficiency of the whole system, and may impact the likelihood of faultsin the future. If the wear percentage and/or efficiency calculated bymodule 1104 for any hardware component is below a predeterminedthreshold value, action module 1106 may send a communication to one ormore one or more clients (e.g., users or technicians) indicating thehardware component requires replacement or repair.

One implementation may take as input to module 1104 the live readings ofthe meter, along with the settings of the related hardware componentstored in library 1102. One example may be a relay, which the metercounts each time the meter triggers that relay to flip, and which theuser has entered the model and install date. Another example may be aPT, which the user has entered the model, install date, rated lifespan,and rated voltage range, and which the voltage the meter measured, whichgoes through that PT, is used.

Another implementation may take as input to module 1104 externalmeasurements of the condition of the hardware device stored in library1102. One example may be a temperature probe placed on the inside of anetwork switch, and which feeds an analog temperature signal to theanalog input of the meter, the temperature signal is stored in library1102. Another example may be an infrared temperature camera pointed at aCT, which measures the peak temperature of the outside, and feeds thattemperature as an analog signal to the analog input of the meter andstores the temperature signal in library 1102.

In another embodiment, module 1104 to provide recommendations to users,based on the detected conditions within the meters or IEDs belonging tothe users, where the conditions are stored in library 1102. One examplemay be where action module 1106 sends a communication to one or moreclients to recommend changing hardware components which are predicted bymodule 1104 to be near end of life. The recommendation may be sent byaction module 1106 when the expected life remaining for the component isbelow a predetermined threshold. Another example may be where actionmodule 1106 recommends (e.g., via a communication sent to one or moreclients) upgrading a meter that is predicted by module 1104 to be nearend of life. Another example may be where action module 1106 notifiesusers when a security threat is detected by module 1106. Another examplemay be where action module 1106 notifies users when module 1104determines that their predicted usage or demand would exceed a certainlimit. Another example may be where action module 1106 notifies userswhen faults occurred in a similar geo-location as their meter orfacility, where the similarity is determined by action module 1106.Another example may be to module 1104 to identify when the currentmeasured by a given meter is too high, and to use action module 1106 torecommend that the user lower usage if the current is above apredetermined threshold.

Referring to FIG. 15 , a method for using machine learning system 1100is shown in accordance with the present disclosure. In step 1202, aplurality of data samples are stored in data library 1102. As describedabove, the data samples may be received from various sources (e.g.,IEDs, clients, etc.). In step 1204, machine learning module 1104receives data samples from the data library 1102. In step 1206, machinelearning module processes the data samples in accordance with at leastone machine learning algorithm (e.g., stored in a memory of server424/524). In step 1208, based on the processing of the data samplesreceived, machine learning module outputs at least one recommendationand/or prediction (e.g., a predicted energy usage, a predicted fault, arecommendation to increase or decrease energy consumption by a load,etc.) In step 1210, action module 1106 receives the at least onerecommendation and/or prediction from machine learning module 1104. Instep 1212, action module 1106 performs at least one action based on therecommendation and/or prediction. For example, the action may includesending a communication signal to at least one client device (e.g., auser's computing device, a service personnel's computing device, etc.)including the recommendation and/or prediction. The action may includesending a control signal to at least one client device and/or one ormore IEDs, where the control signal is generated based on therecommendation and/or prediction. For example, the control signal mayinclude increasing or decreasing the energy consumption of a load,turning on or off a load, rebooting, shutting down, and/or updating oneor more IEDs, etc.

FIG. 16 is a block diagram illustrating physical components of acomputing device 1302, for example a client computing device (such asclient 428/528/628), a server (such as Meter Data Cloud server 424/524),or any other computing device, with which examples of the presentdisclosure may be practiced. In a basic configuration, the computingdevice 1302 may include at least one processing unit 1304 and a systemmemory 1306. Depending on the configuration and type of computingdevice, the system memory 1306 may comprise, but is not limited to,volatile storage (e.g., random access memory), non-volatile storage(e.g., read-only memory), flash memory, or any combination of suchmemories. The system memory 1306 may include an operating system 1307and one or more program modules 1308 suitable for running softwareprograms/modules 1320 such as IO manager 1324, other utility 1326 andapplication 1328. As examples, system memory 1306 may store instructionsfor execution. Other examples of system memory 1306 may store dataassociated with applications. The operating system 1307, for example,may be suitable for controlling the operation of the computing device1302. Furthermore, examples of the present disclosure may be practicedin conjunction with a graphics library, other operating systems, or anyother application program and is not limited to any particularapplication or system. This basic configuration is illustrated in FIG.16 by those components within a dashed line 1322. The computing device1302 may have additional features or functionality. For example, thecomputing device 1302 may also include additional data storage devices(removable and/or non-removable) such as, for example, magnetic disks,optical disks, or tape. Such additional storage is illustrated in FIG.16 by a removable storage device 1309 and a non-removable storage device1310.

As stated above, a number of program modules and data files may bestored in the system memory 1306. While executing on the processing unit1304, program modules 1308 (e.g., Input/Output (I/O) manager 1324, otherutility 1326 and application 1328) may perform processes including, butnot limited to, one or more of the stages of the operations describedthroughout this disclosure. For example, one such application 1328 mayimplement the machine learning algorithm or artificial intelligencesystem 1100 shown and described in relation to FIGS. 14 and 15 . Otherprogram modules that may be used in accordance with examples of thepresent disclosure may include electronic mail and contactsapplications, word processing applications, spreadsheet applications,database applications, slide presentation applications, drawing orcomputer-aided application programs, photo editing applications,authoring applications, etc.

Furthermore, examples of the present disclosure may be practiced in anelectrical circuit comprising discrete electronic elements, packaged orintegrated electronic chips containing logic gates, a circuit utilizinga microprocessor, or on a single chip containing electronic elements ormicroprocessors. For example, examples of the present disclosure may bepracticed via a system-on-a-chip (SOC) where each or many of thecomponents illustrated in FIG. 16 may be integrated onto a singleintegrated circuit. Such an SOC device may include one or moreprocessing units, graphics units, communications units, systemvirtualization units and various application functionality all of whichare integrated (or “burned”) onto the chip substrate as a singleintegrated circuit. When operating via an SOC, the functionalitydescribed herein may be operated via application-specific logicintegrated with other components of the computing device 1302 on thesingle integrated circuit (chip). Examples of the present disclosure mayalso be practiced using other technologies capable of performing logicaloperations such as, for example, AND, OR, and NOT, including but notlimited to mechanical, optical, fluidic, and quantum technologies. Inaddition, examples of the present disclosure may be practiced within ageneral purpose computer or in any other circuits or systems.

The computing device 1302 may also have one or more input device(s) 1312such as a keyboard, a mouse, a pen, a sound input device, a device forvoice input/recognition, a touch input device, etc. The output device(s)1314 such as a display, speakers, a printer, etc. may also be included.The aforementioned devices are examples and others may be used. Thecomputing device 1304 may include one or more communication connections1316 allowing communications with other computing devices 1318 (e.g.,intermediate servers 530/630) and/or meters/IEDs 1319 (e.g., IEDs10/410/412/414/510/512/514/610/612/614/702). Examples of suitablecommunication connections 1316 include, but are not limited to, anetwork interface card; RF transmitter, receiver, and/or transceivercircuitry; universal serial bus (USB), parallel, and/or serial ports.

The term computer readable media as used herein may include computerstorage media. Computer storage media may include volatile andnonvolatile, removable and non-removable media implemented in any methodor technology for storage of information, such as computer readableinstructions, data structures, or program modules. The system memory1306, the removable storage device 1309, and the non-removable storagedevice 1310 are all computer storage media examples (i.e., memorystorage.) Computer storage media may include RAM, ROM, electricallyerasable read-only memory (EEPROM), flash memory or other memorytechnology, CD-ROM, digital versatile disks (DVD) or other opticalstorage, magnetic cassettes, magnetic tape, magnetic disk storage orother magnetic storage devices, or any other article of manufacturewhich can be used to store information and which can be accessed by thecomputing device 1302. Any such computer storage media may be part ofthe computing device 1302. Computer storage media does not include acarrier wave or other propagated or modulated data signal.

Communication media may be embodied by computer readable instructions,data structures, program modules, or other data in a modulated datasignal, such as a carrier wave or other transport mechanism, andincludes any information delivery media. The term “modulated datasignal” may describe a signal that has one or more characteristics setor changed in such a manner as to encode information in the signal. Byway of example, and not limitation, communication media may includewired media such as a wired network or direct-wired connection, andwireless media such as acoustic, radio frequency (RF), infrared, andother wireless media.

It is to be appreciated that the various features shown and describedare interchangeable, that is a feature shown in one embodiment may beincorporated into another embodiment. It is further to be appreciatedthat the methods, functions, algorithms, etc. described above may beimplemented by any single device and/or combinations of devices forminga system, including but not limited to meters, IEDs, servers, storagedevices, processors, memories, FPGAs, DSPs, etc.

While non-limiting embodiments are disclosed herein, many variations arepossible which remain within the concept and scope of the presentdisclosure. Such variations would become clear to one of ordinary skillin the art after inspection of the specification, drawings and claimsherein. The present disclosure therefore is not to be restricted exceptwithin the spirit and scope of the appended claims.

Furthermore, although the foregoing text sets forth a detaileddescription of numerous embodiments, it should be understood that thelegal scope of the present disclosure is defined by the words of theclaims set forth at the end of this patent. The detailed description isto be construed as exemplary only and does not describe every possibleembodiment, as describing every possible embodiment would beimpractical, if not impossible. One could implement numerous alternateembodiments, using either current technology or technology developedafter the filing date of this patent, which would still fall within thescope of the claims.

It should also be understood that, unless a term is expressly defined inthis patent using the sentence “As used herein, the term ‘______’ ishereby defined to mean . . . ” or a similar sentence, there is no intentto limit the meaning of that term, either expressly or by implication,beyond its plain or ordinary meaning, and such term should not beinterpreted to be limited in scope based on any statement made in anysection of this patent (other than the language of the claims). To theextent that any term recited in the claims at the end of this patent isreferred to in this patent in a manner consistent with a single meaning,that is done for sake of clarity only so as to not confuse the reader,and it is not intended that such claim term be limited, by implicationor otherwise, to that single meaning. Finally, unless a claim element isdefined by reciting the word “means” and a function without the recitalof any structure, it is not intended that the scope of any claim elementbe interpreted based on the application of 35 U.S.C. § 112, sixthparagraph.

What is claimed is:
 1. A machine learning system for use with a powerdistribution system, the power distribution system including one or moreloads that consume the power provided, comprising: a data librarydatabase configured to store a plurality of data samples, wherein atleast a portion of the data samples are received from one or moreintelligent electronic devices (IEDs) that are coupled to at least onepower line associated with the one or more loads over various locationsof the power distribution system, wherein the data samples include afirst trained set based on historical readings by the one or more IEDs,a second trained set based on live readings of the one or more IEDs, andweather information for the various locations, the historical readingsand the live readings include at least one of voltage, current, andfrequency values measured by the one or more IEDs over a period of time,each value of the historical readings and the live readings beingassociated with a timestamp; the data library database furtherconfigured to store the historical readings in at least one first tablein accordance with a time series optimization scheme, wherein the timeseries optimization scheme includes at least one indexed table for eachof the stored at least one first table of historical readings, eachindexed table tracks one selected field of a particular value measuredby at least on IED and associated timestamps in the at least one firsttable such that retrieval of the particular value over a period of timedoes not look at every record in the at least one first table; a machinelearning processor configured to execute at least one machine learningalgorithm and receive the data samples from the data library database,the machine learning processor configured to process the data samples inaccordance with the at least one machine learning algorithm and outputat least one prediction of energy usage in a predetermined future timeinterval based on the data samples received; and an action processorconfigured to receive the at least one prediction of energy usage fromthe machine learning processor and perform at least one action based onthe at least one prediction of energy usage, wherein the action includesgenerating at least one control signal and outputting the at least onecontrol signal to at least one of the one or more IEDs, wherein thecontrol signal is configured to shut off one or more loads associatedwith the at least one of the one or more IEDs when the at least oneprediction of energy usage is above a predetermined energy usagethreshold.
 2. The machine learning system of claim 1, further comprisinga server including at least one memory and at least one processor, thedata library database stored in the at least one memory and the machinelearning processor and the action processor executed by the at least oneprocessor.
 3. The machine learning system of claim 1, wherein the atleast one machine learning algorithm includes at least one of anArtificial Neural Network, a Backpropagation, Deep Learning, aConvolutional Neural Network, a Recurrent Neural Network, and/or anEvolution Algorithm.
 4. The machine learning system of claim 2, whereinthe at least one memory includes a message queuing system that isexecuted by the at least one processor, the message queuing systemrequests the data samples from the one or more IEDs.
 5. The machinelearning system of claim 4, wherein the message queuing system operatesin accordance with at least one of Advanced Message Queuing Protocol(AMPQ), Message Queuing Telemetry Transport (MQTT), Rabbit MessageQueuing (RabbitMQ), and/or a custom HTTP (hypertext transport protocol)web service.
 6. The machine learning system of claim 1, wherein theaction performed by the action processor includes generating andoutputting a communication signal to at least one client indicating thepredicted energy usage.
 7. The machine learning system of claim 1,wherein the predetermined energy usage threshold is determined by themachine learning processor based on load shedding parameters, the loadshedding parameters including at least one of time of day, designationof equipment as essential or non-essential, and/or real-time pricingissued by a utility.
 8. The machine learning system of claim 1, whereinthe action performed by the action processor includes generating andoutputting a communication signal to at least one client indicatingadditional energy may be consumed by a load if the predicted energyusage is below a predetermined threshold.
 9. The machine learning systemof claim 1, wherein the data samples further includes real time pricinginformation issued by an electrical utility, the machine learningprocessor predicts pricing costs for the predetermined future timeinterval based on the real time pricing information and the data samplesassociated to the one or more IEDs, and the action processor sends acommunication signal to at least one client including the predictingpricing costs for the predetermined future time interval.
 10. Themachine learning system of claim 9, wherein the machine learningprocessor generates a recommendation as to which periods within thepredetermined future time interval to lower and increase energy usage toreduce costs and the action processor sends a communication signal to atleast one client including the recommendation.
 11. The machine learningsystem of claim 9, wherein the machine learning processor generates arecommendation as to when ideal periods within the predetermined futuretime interval to lower and increase energy usage to reduce costs and theaction processor sends a control signal to the one or more IEDs to turnon or off loads associated with the one or more IEDs to increase ordecrease energy usage in a way that lowers costs.
 12. The machinelearning system of claim 1, wherein the data samples include waveformsignatures of faults measured by the one or more IEDs occurring on thepower distribution system, and the at least one prediction of energyusage includes a prediction of at least one type of fault and a numberof predicted future occurrences of the predicted at least one type offault.
 13. The machine learning system of claim 12, where the at leastone type of fault includes at least one of transients, interruption ofsupply voltage or load current, undervoltage, overvoltage, waveformdistortion, and/or voltage fluctuations.
 14. The machine learning systemof claim 1, wherein the one or more IEDs include at least one of aProgrammable Logic Controller (PLC), a Remote Terminal Unit (RTU), anelectric power meter, a panel meter, a protective relay, a faultrecorder, a phase measurement unit, a serial switch and/or a smartinput/output device.
 15. A system for use with a power distributionsystem, the power distribution system including one or more loads thatconsume the power provided, comprising: a data library databaseconfigured to store a plurality of data samples, wherein at least aportion of the data samples are received from one or more intelligentelectronic devices (IEDs) that are coupled to at least one power lineassociated with the one or more loads, the data samples received fromthe one or more IEDs include voltage waveform signatures of faultsmeasured by the one or more IEDs occurring on the at least one powerline of the power distribution system, wherein the data samples of thevoltage waveform signatures of the faults include time of fault,duration of fault, magnitude of fault and triggering channel of the IEDthat the fault occurred on; a machine learning processor configured toexecute at least one machine learning algorithm and receive the datasamples from the data library database, the machine learning processorconfigured to process the data samples in accordance with the at leastone machine learning algorithm and output a prediction of at least onetype of fault to occur on the at least one power line of powerdistribution system, a predetermined future time interval of when thefault may occur and a number of predicted future occurrences of theprediction of the at least one type of fault; and an action processorconfigured to receive the prediction of the at least one type of fault,the predetermined future time interval and the number of predictedfuture occurrences from the machine learning processor and perform atleast one action based on the prediction of the at least one type offault, wherein the action includes generating at least one controlsignal and outputting the at least one control signal to at least one ofthe one or more IEDs, wherein the control signal is configured to shutoff one or more loads associated with a location of a predicted fault atthe predetermined future time interval.
 16. The system of claim 15,where the at least one type of fault to occur on the at least one powerline of the power distribution system includes at least one oftransients, interruption of supply voltage or load current,undervoltage, overvoltage, waveform distortion, and/or voltagefluctuations.
 17. The system of claim 16, wherein the data samplesfurther includes live readings of the power distribution system.
 18. Thesystem of claim 16, wherein the data samples further include at leastone of harmonics and/or interharmonics computed from voltage, currentand frequency values measured by the one or more IEDs over a period oftime.
 19. The system of claim 15, wherein the one or more IEDs includeat least one of a Programmable Logic Controller (PLC), a Remote TerminalUnit (RTU), an electric power meter, a panel meter, a protective relay,a fault recorder, a phase measurement unit, a serial switch and/or asmart input/output device.
 20. A system for use with a powerdistribution system, the power distribution system including one or moreloads that consume the power provided, comprising: a data librarydatabase configured to store a plurality of data samples, wherein atleast a portion of the data samples are received from one or moreintelligent electronic devices (IEDs) that are coupled to at least onepower line associated with the one or more loads, the data samplesreceived from the one or more IEDs include at least one of voltage,current, and frequency values measured by the one or more IEDs over aperiod of time; a machine learning processor configured to execute atleast one machine learning algorithm that layers neural networkstogether such that sets of outputs from one layer are inputs to the nextlayer, the machine learning processor configured to process the datasamples received from the data library database in accordance with theat least one machine learning algorithm and output a prediction of atleast one type of power distribution disturbance; and an actionprocessor configured to receive the prediction of the at least one typeof power distribution disturbance from the machine learning processorand perform at least one action based on the prediction of the at leastone type of power distribution disturbance, wherein the action includesgenerating at least one control signal and outputting the at least onecontrol signal to at least one of the one or more IEDs, wherein thecontrol signal is configured to shut off one or more loads associatedwith a location of a predicted power distribution disturbance, whereinthe at least one type of power distribution disturbance includes noiseon at least one power line of the power distribution system and a firstlayer of the neural networks is trained to classify the noise introducedinto the at least one power line from an input set of harmonics, whichis fed into a second layer that identifies possible sources of thenoise, which is fed into a third layer that identifies from the possiblesources a source of the classified noise, wherein each layer is trainedindividually.
 21. The system of claim 20, wherein the possible sourcesof the noise include at least one of electrostatic interference,electrical storms, electromagnetic interference, radio frequencyinterference, and/or devices which produce spikes in voltage, current,and/or harmonics.
 22. The system of claim 20, wherein if a level of thenoise is above a predetermined threshold, the action processor sends acommunication signal to one or more clients indicating the source of thenoise and an action to be taken.
 23. The system of claim 22, wherein ifthe source of the noise is a device, the action processor sends acontrol signal to the device or a controller that controls the device toturn off the device.
 24. The system of claim 23, wherein the device isat least one of an electrical motor, a lighting circuit, a converterand/or a drive system.
 25. The system of claim 20, wherein theidentified source is fed into a fourth layer that uses original harmonicinformation to identify a likelihood that that the source causing thenoise will fail and when the source will fail.
 26. The system of claim25, wherein if the identified likelihood is above a predeterminedthreshold, the action processor sends an alert to at least one client toidentify the source likely to fail and to service and/or replace thesource.
 27. The system of claim 25, wherein if the identified likelihoodis above a predetermined threshold, the action processor sends a controlsignal to one of the IEDs or another controller to cause the source thatis likely to fail to be shut down.
 28. The system of claim 20, whereinthe one or more IEDs include at least one of a Programmable LogicController (PLC), a Remote Terminal Unit (RTU), an electric power meter,a panel meter, a protective relay, a fault recorder, a phase measurementunit, a serial switch and/or a smart input/output device.